| |
09.03.2016, 11:26
| #1 |
 |  Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Ich geb mein bestes, unter den Bedingungen ist es nicht so einfach. Passwörter werden geändert, Logs manipuliert, Accounts gelöscht... Linux Ubuntu- chkrootkit Code:
ATTFilter ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not found
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not found
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not infected
Checking `mingetty'... not found
Checking `netstat'... not infected
Checking `named'... not found
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not found
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not found
Checking `syslogd'... not tested
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not found
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for rootkit HiDrootkit's default files... nothing found
Searching for rootkit t0rn's default files... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for rootkit Lion's default files... nothing found
Searching for rootkit RSHA's default files... nothing found
Searching for rootkit RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while... The following suspicious files and directories were found:
/usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit /lib/modules/4.2.0-16-generic/vdso/.build-id
/lib/modules/4.2.0-16-generic/vdso/.build-id
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... nothing found
Searching for Adore Worm... nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for common ssh-scanners default files... nothing found
Searching for Linux/Ebury - Operation Windigo ssh... Possible Linux/Ebury - Operation Windigo installetd
Searching for 64-bit Linux Rootkit ... nothing found
Searching for 64-bit Linux Rootkit modules... nothing found
Searching for suspect PHP files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... chkproc: nothing detected
chkdirs: nothing detected
Checking `rexedcs'... not found
Checking `sniffer'... lo: not promisc and no packet sniffer sockets
Checking `w55808'... not infected
Checking `wted'... chkwtmp: nothing deleted
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... user bbs deleted or never logged from lastlog!
Checking `chkutmp'... The tty of the following user process(es) were not found
in /var/run/utmp !
! RUID PID TTY CMD
! root 808 tty7 /usr/bin/X -core :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
chkutmp: nothing deleted
Checking `OSX_RSPLUG'... not infected
Code:
ATTFilter [+] Initializing program
------------------------------------
Warning: PID file exists, probably another Lynis process is running.
------------------------------------------------------------------------------
If you are unsure another Lynis process is running currently, you are adviced
to stop current process and check the process list first. If you cancelled
(by using CTRL+C) a previous instance, you can ignore this message.
You are adviced to check for temporary files after program completion.
------------------------------------------------------------------------------
Note: Cancelling the program can leave temporary files behind
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
- Detecting OS... [ DONE ]
---------------------------------------------------
Program version: 2.1.1
Operating system: Linux
Operating system name: Ubuntu
Operating system version: 15.10
Kernel version: 4.2.0
Hardware platform: x86_64
Hostname: bbs-HP-280-G1-MT
Auditor: [Unknown]
Profile: /etc/lynis/default.prf
Log file: /var/log/lynis.log
Report file: /var/log/lynis-report.dat
Report version: 1.0
Plugin directory: /etc/lynis/plugins
---------------------------------------------------
- Checking profile file (/etc/lynis/default.prf)...
- Program update status... [ NO UPDATE ]
[+] System Tools
------------------------------------
- Scanning available tools...
- Checking system binaries...
[+] Plugins (phase 1)
------------------------------------
Note: plugins have more extensive tests, which may take a few minutes to complete
- Plugin: debian
[
[+] Debian Tests
------------------------------------
- Checking for system binaries that are required by Debian Tests...[-8C
- Checking /bin... [ FOUND ]
- Checking /sbin... [ FOUND ]
- Checking /usr/bin... [ FOUND ]
- Checking /usr/sbin... [ FOUND ]
- Checking /usr/local/bin... [ FOUND ]
- Checking /usr/local/sbin... [ FOUND ]
- Authentication:
- PAM (Pluggable Authentication Modules):
- libpam-tmpdir [ Not Installed ]
- libpam-usb [ Not Installed ]
- File System Checks:
- DM-Crypt, Cryptsetup & Cryptmount:
- Checking / on /dev/mapper/sda5_crypt [ ENCRYPTED (Type: LUKS1) ]
- Checking /boot on /dev/sda1 [ NOT ENCRYPTED ]
- Ecryptfs [ INSTALLED ]
- Home for bbs [ YES ]
- Software:
- apt-listbugs [ Not Installed ]
- apt-listchanges [ Not Installed ]
- checkrestart [ Not Installed ]
- debsecan [ Not Installed ]
- debsums [ Not Installed ]
- fail2ban [ Not Installed ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
]
[+] Boot and services
------------------------------------
- Service Manager [ UNKNOWN ]
- Checking presence GRUB2 [ FOUND ]
- Checking for password protection [ WARNING ]
- Check running services (systemctl) [ DONE ]
Result: found 30 running services
- Check enabled services at boot (systemctl) [ DONE ]
Result: found 46 enabled services
- Check startup files (permissions) [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Kernel
------------------------------------
- Checking default run level [ RUNLEVEL 5 ]
- Checking CPU support (NX/PAE)
CPU support: PAE and/or NoeXecute supported [ FOUND ]
- Checking kernel version and release [ DONE ]
- Checking kernel type [ DONE ]
- Checking loaded kernel modules [ DONE ]
Found 92 active modules
- Checking Linux kernel configuration file [ FOUND ]
- Checking default I/O kernel scheduler [ FOUND ]
- Checking for available kernel update [ OK ]
- Checking core dumps configuration [ DISABLED ]
- Checking setuid core dumps configuration [ PROTECTED ]
- Check if reboot is needed [ NO ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Memory and processes
------------------------------------
- Checking /proc/meminfo [ FOUND ]
- Searching for dead/zombie processes [ WARNING ]
- Searching for IO waiting processes [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Users, Groups and Authentication
------------------------------------
- Search administrator accounts [ OK ]
- Checking for non-unique UIDs [ OK ]
- Checking consistency of group files (grpck) [ OK ]
- Checking non unique group ID's [ OK ]
- Checking non unique group names [ OK ]
- Checking password file consistency [ OK ]
- Query system users (non daemons) [ DONE ]
- Checking NIS+ authentication support [ NOT ENABLED ]
- Checking NIS authentication support [ NOT ENABLED ]
- Checking sudoers file [ FOUND ]
- Check sudoers file permissions [ OK ]
- Checking PAM password strength tools [ SUGGESTION ]
- Checking PAM configuration files (pam.conf) [ FOUND ]
- Checking PAM configuration files (pam.d) [ FOUND ]
- Checking PAM modules [ FOUND ]
- Checking LDAP module in PAM [ NOT FOUND ]
- Checking accounts without expire date [ OK ]
- Checking accounts without password [ OK ]
- Checking user password aging [ DISABLED ]
- Determining default umask
- Checking umask (/etc/profile) [ OK ]
- Checking umask (/etc/login.defs) [ SUGGESTION ]
- Checking umask (/etc/init.d/rc) [ SUGGESTION ]
- Checking LDAP authentication support [ NOT ENABLED ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Shells
------------------------------------
- Checking shells from /etc/shells
Result: found 4 shells (valid shells: 4).
- Session timeout settings/tools [ NONE ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] File systems
------------------------------------
- Checking mount points
- Checking /home mount point [ OK ]
- Checking /tmp mount point [ SUGGESTION ]
- Checking /var mount point [ SUGGESTION ]
- Checking LVM volume groups [ FOUND ]
- Checking LVM volumes [ FOUND ]
- Querying FFS/UFS mount points (fstab) [ NONE ]
- Query swap partitions (fstab) [ OK ]
- Testing swap partitions [ OK ]
- Checking for old files in /tmp [ OK ]
- Checking /tmp sticky bit [ OK ]
- ACL support root file system [ ENABLED ]
- Checking Locate database [ FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Storage
------------------------------------
- Checking usb-storage driver (modprobe config) [ NOT DISABLED ]
- Checking firewire ohci driver (modprobe config) [ DISABLED ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] NFS
------------------------------------
- Check running NFS daemon [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Name services
------------------------------------
- Checking default DNS search domain [ NONE ]
- Checking search domains [ FOUND ]
- Checking /etc/resolv.conf options [ NONE ]
- Searching DNS domain name [ FOUND ]
Domain name: bbs-HP-280-G1-MT
- Checking nscd status [ NOT FOUND ]
- Checking BIND status [ NOT FOUND ]
- Checking PowerDNS status [ NOT FOUND ]
- Checking ypbind status [ NOT FOUND ]
- Checking /etc/hosts
- Checking /etc/hosts (duplicates) [ OK ]
- Checking /etc/hosts (hostname) [ OK ]
- Checking /etc/hosts (localhost) [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Ports and packages
------------------------------------
- Searching package managers
- Searching dpkg package manager [ FOUND ]
- Querying package manager
- Query unpurged packages [ FOUND ]
- Checking security repository in sources.list file [ OK ]
- Checking APT package database [ OK ]
E: Could not get lock /var/lib/apt/lists/lock - open (11: Resource temporarily unavailable)
E: Unable to lock directory /var/lib/apt/lists/
- Checking vulnerable packages [ OK ]
- Checking upgradeable packages [ SKIPPED ]
- Checking package audit tool [ INSTALLED ]
Found: apt-check
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Networking
------------------------------------
- Checking configured nameservers
- Testing nameservers
Nameserver: 127.0.1.1 [ OK ]
- Minimal of 2 responsive nameservers [ WARNING ]
- Checking default gateway [ DONE ]
- Getting listening ports (TCP/UDP) [ DONE ]
* Found 12 ports
- Checking promiscuous interfaces [ OK ]
- Checking waiting connections [ OK ]
- Checking status DHCP client [ RUNNING ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Printers and Spools
------------------------------------
- Checking cups daemon [ RUNNING ]
- Checking CUPS configuration file [ OK ]
- File permissions [ WARNING ]
- Checking CUPS addresses/sockets [ FOUND ]
- Checking lp daemon [ NOT RUNNING ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: e-mail and messaging
------------------------------------
- Checking Exim status [ NOT FOUND ]
- Checking Postfix status [ NOT FOUND ]
- Checking Qmail status [ NOT FOUND ]
- Checking Sendmail status [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: firewalls
------------------------------------
- Checking iptables kernel module [ FOUND ]
- Checking for empty ruleset [ OK ]
- Checking for unused rules [ WARNING ]
- Checking pflogd status [ NOT FOUND ]
- Checking pf [ NOT FOUND ]
- Checking host based firewall [ ACTIVE ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: webserver
------------------------------------
- Checking Apache [ NOT FOUND ]
- Checking nginx [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] SSH Support
------------------------------------
- Checking running SSH daemon [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] SNMP Support
------------------------------------
- Checking running SNMP daemon [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Databases
------------------------------------
- MySQL process status [ NOT FOUND ]
- PostgreSQL processes status [ NOT FOUND ]
- Oracle processes status [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] LDAP Services
------------------------------------
- Checking OpenLDAP instance [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] PHP
------------------------------------
- Checking PHP [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Squid Support
------------------------------------
- Checking running Squid daemon [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Logging and files
------------------------------------
- Checking for a running log daemon [ OK ]
- Checking Syslog-NG status [ NOT FOUND ]
- Checking systemd journal status [ FOUND ]
- Checking Metalog status [ NOT FOUND ]
- Checking RSyslog status [ FOUND ]
- Checking RFC 3195 daemon status [ NOT FOUND ]
- Checking minilogd instances [ NOT FOUND ]
- Checking logrotate presence [ OK ]
- Checking log directories (static list) [ DONE ]
- Checking open log files [ DONE ]
- Checking deleted files in use [ FILES FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Insecure services
------------------------------------
- Checking inetd status [ NOT ACTIVE ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Banners and identification
------------------------------------
- /etc/motd [ NOT FOUND ]
- /etc/issue [ FOUND ]
- /etc/issue contents [ WEAK ]
- /etc/issue.net [ FOUND ]
- /etc/issue.net contents [ WEAK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Scheduled tasks
------------------------------------
- Checking crontab/cronjob [ DONE ]
- Checking atd status [ NOT RUNNING ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Accounting
------------------------------------
- Checking accounting information [ NOT FOUND ]
- Checking sysstat accounting data [ NOT FOUND ]
- Checking auditd [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Time and Synchronization
------------------------------------
- Checking for a running NTP daemon or client [ WARNING ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Cryptography
------------------------------------
- Checking SSL certificate expiration [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Virtualization
------------------------------------
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Containers
------------------------------------
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Security frameworks
------------------------------------
- Checking presence AppArmor [ FOUND ]
- Checking AppArmor status [ ENABLED ]
- Checking presence SELinux [ NOT FOUND ]
- Checking presence grsecurity [ NOT FOUND ]
- Checking for implemented MAC framework [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: file integrity
------------------------------------
- Checking file integrity tools
- Checking presence integrity tool [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: System tooling
------------------------------------
- Checking automation tooling
- Automation tooling [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Software: Malware scanners
------------------------------------
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] File Permissions
------------------------------------
- Starting file permissions check
/etc/lilo.conf [ NOT FOUND ]
/root/.ssh [ NOT FOUND ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Home directories
------------------------------------
- Checking shell history files [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
[+] Kernel Hardening
------------------------------------
- Comparing sysctl key pairs with scan profile
- kernel.core_uses_pid (exp: 1) [ DIFFERENT ]
- kernel.ctrl-alt-del (exp: 0) [ OK ]
- kernel.kptr_restrict (exp: 1) [ OK ]
- kernel.sysrq (exp: 0) [ DIFFERENT ]
- net.ipv4.conf.all.accept_redirects (exp: 0) [ OK ]
- net.ipv4.conf.all.accept_source_route (exp: 0) [ OK ]
- net.ipv4.conf.all.bootp_relay (exp: 0) [ OK ]
- net.ipv4.conf.all.forwarding (exp: 0) [ OK ]
- net.ipv4.conf.all.log_martians (exp: 1) [ DIFFERENT ]
- net.ipv4.conf.all.mc_forwarding (exp: 0) [ OK ]
- net.ipv4.conf.all.proxy_arp (exp: 0) [ OK ]
- net.ipv4.conf.all.rp_filter (exp: 1) [ OK ]
- net.ipv4.conf.all.send_redirects (exp: 0) [ DIFFERENT ]
- net.ipv4.conf.default.accept_redirects (exp: 0) [ OK ]
- net.ipv4.conf.default.accept_source_route (exp: 0) [ OK ]
- net.ipv4.conf.default.log_martians (exp: 1) [ DIFFERENT ]
- net.ipv4.icmp_echo_ignore_broadcasts (exp: 1) [ OK ]
- net.ipv4.icmp_ignore_bogus_error_responses (exp: 1) [ OK ]
- net.ipv4.tcp_syncookies (exp: 1) [ DIFFERENT ]
- net.ipv4.tcp_timestamps (exp: 0) [ DIFFERENT ]
- net.ipv6.conf.all.accept_redirects (exp: 0) [ OK ]
- net.ipv6.conf.all.accept_source_route (exp: 0) [ OK ]
- net.ipv6.conf.default.accept_redirects (exp: 0) [ OK ]
- net.ipv6.conf.default.accept_source_route (exp: 0) [ OK ]
[ Press [ENTER] to continue, or [CTRL]+C to stop ]
Code:
ATTFilter
[ Rootkit Hunter version 1.4.2 ]
Checking rkhunter data files...
Checking file mirrors.dat [ No update ]
Checking file programs_bad.dat [ Updated ]
Checking file backdoorports.dat [ No update ]
Checking file suspscan.dat [ No update ]
Checking file i18n/cn [ No update ]
Checking file i18n/de [ No update ]
Checking file i18n/en [ No update ]
/usr/bin/rkhunter: 7439: [: Binary: unexpected operator
Checking file i18n/tr [ No update ]
Checking file i18n/tr.utf8 [ No update ]
/usr/bin/rkhunter: 7439: [: Binary: unexpected operator
Checking file i18n/zh [ No update ]
Checking file i18n/zh.utf8 [ No update ]
bbs@bbs-HP-280-G1-MT:~$ sudo rkhunter -c
[ Rootkit Hunter version 1.4.2 ]
Checking system commands...
Performing 'strings' command checks
Checking 'strings' command [ OK ]
Performing 'shared libraries' checks
Checking for preloading variables [ None found ]
Checking for preloaded libraries [ None found ]
Checking LD_LIBRARY_PATH variable [ Not found ]
Performing file properties checks
Checking for prerequisites [ OK ]
/usr/sbin/adduser [ OK ]
/usr/sbin/chroot [ OK ]
/usr/sbin/cron [ OK ]
/usr/sbin/groupadd [ OK ]
/usr/sbin/groupdel [ OK ]
/usr/sbin/groupmod [ OK ]
/usr/sbin/grpck [ OK ]
/usr/sbin/nologin [ OK ]
/usr/sbin/pwck [ OK ]
/usr/sbin/rsyslogd [ OK ]
/usr/sbin/tcpd [ OK ]
/usr/sbin/useradd [ OK ]
/usr/sbin/userdel [ OK ]
/usr/sbin/usermod [ OK ]
/usr/sbin/vipw [ OK ]
/usr/sbin/unhide-linux [ OK ]
/usr/sbin/unhide-posix [ OK ]
/usr/sbin/unhide-tcp [ OK ]
/usr/bin/awk [ OK ]
/usr/bin/basename [ OK ]
/usr/bin/chattr [ OK ]
/usr/bin/curl [ OK ]
/usr/bin/cut [ OK ]
/usr/bin/diff [ OK ]
/usr/bin/dirname [ OK ]
/usr/bin/dpkg [ OK ]
/usr/bin/dpkg-query [ OK ]
/usr/bin/du [ OK ]
/usr/bin/env [ OK ]
/usr/bin/file [ OK ]
/usr/bin/find [ OK ]
/usr/bin/GET [ OK ]
/usr/bin/groups [ OK ]
/usr/bin/head [ OK ]
/usr/bin/id [ OK ]
/usr/bin/killall [ OK ]
/usr/bin/last [ OK ]
/usr/bin/lastlog [ OK ]
/usr/bin/ldd [ OK ]
/usr/bin/less [ OK ]
/usr/bin/locate [ OK ]
/usr/bin/logger [ OK ]
/usr/bin/lsattr [ OK ]
/usr/bin/lsof [ OK ]
/usr/bin/mail [ OK ]
/usr/bin/md5sum [ OK ]
/usr/bin/mlocate [ OK ]
/usr/bin/newgrp [ OK ]
/usr/bin/passwd [ OK ]
/usr/bin/perl [ OK ]
/usr/bin/pgrep [ OK ]
/usr/bin/pkill [ OK ]
/usr/bin/pstree [ OK ]
/usr/bin/rkhunter [ OK ]
/usr/bin/runcon [ OK ]
/usr/bin/sha1sum [ OK ]
/usr/bin/sha224sum [ OK ]
/usr/bin/sha256sum [ OK ]
/usr/bin/sha384sum [ OK ]
/usr/bin/sha512sum [ OK ]
/usr/bin/size [ OK ]
/usr/bin/sort [ OK ]
/usr/bin/ssh [ OK ]
/usr/bin/stat [ OK ]
/usr/bin/strace [ OK ]
/usr/bin/strings [ OK ]
/usr/bin/sudo [ OK ]
/usr/bin/tail [ OK ]
/usr/bin/telnet [ OK ]
/usr/bin/test [ OK ]
/usr/bin/top [ OK ]
/usr/bin/touch [ OK ]
/usr/bin/tr [ OK ]
/usr/bin/uniq [ OK ]
/usr/bin/users [ OK ]
/usr/bin/vmstat [ OK ]
/usr/bin/w [ OK ]
/usr/bin/watch [ OK ]
/usr/bin/wc [ OK ]
/usr/bin/wget [ OK ]
/usr/bin/whatis [ OK ]
/usr/bin/whereis [ OK ]
/usr/bin/which [ OK ]
/usr/bin/who [ OK ]
/usr/bin/whoami [ OK ]
/usr/bin/unhide [ OK ]
/usr/bin/mawk [ OK ]
/usr/bin/lwp-request [ OK ]
/usr/bin/bsd-mailx [ OK ]
/usr/bin/telnet.netkit [ OK ]
/usr/bin/w.procps [ OK ]
/sbin/depmod [ OK ]
/sbin/fsck [ OK ]
/sbin/ifconfig [ OK ]
/sbin/ifdown [ OK ]
/sbin/ifup [ OK ]
/sbin/init [ OK ]
/sbin/insmod [ OK ]
/sbin/ip [ OK ]
/sbin/lsmod [ OK ]
/sbin/modinfo [ OK ]
/sbin/modprobe [ OK ]
/sbin/rmmod [ OK ]
/sbin/route [ OK ]
/sbin/runlevel [ OK ]
/sbin/sulogin [ OK ]
/sbin/sysctl [ OK ]
/bin/bash [ OK ]
/bin/cat [ OK ]
/bin/chmod [ OK ]
/bin/chown [ OK ]
/bin/cp [ OK ]
/bin/date [ OK ]
/bin/df [ OK ]
/bin/dmesg [ OK ]
/bin/echo [ OK ]
/bin/ed [ OK ]
/bin/egrep [ OK ]
/bin/fgrep [ OK ]
/bin/fuser [ OK ]
/bin/grep [ OK ]
/bin/ip [ OK ]
/bin/kill [ OK ]
/bin/less [ OK ]
/bin/login [ OK ]
/bin/ls [ OK ]
/bin/lsmod [ OK ]
/bin/mktemp [ OK ]
/bin/more [ OK ]
/bin/mount [ OK ]
/bin/mv [ OK ]
/bin/netstat [ OK ]
/bin/ping [ OK ]
/bin/ps [ OK ]
/bin/pwd [ OK ]
/bin/readlink [ OK ]
/bin/sed [ OK ]
/bin/sh [ OK ]
/bin/su [ OK ]
/bin/touch [ OK ]
/bin/uname [ OK ]
/bin/which [ OK ]
/bin/kmod [ OK ]
/bin/systemd [ OK ]
/bin/systemctl [ OK ]
/bin/dash [ OK ]
/lib/systemd/systemd [ OK ]
[Press <ENTER> to continue]
Checking for rootkits...
Performing check of known rootkit files and directories
55808 Trojan - Variant A [ Not found ]
ADM Worm [ Not found ]
AjaKit Rootkit [ Not found ]
Adore Rootkit [ Not found ]
aPa Kit [ Not found ]
Apache Worm [ Not found ]
Ambient (ark) Rootkit [ Not found ]
Balaur Rootkit [ Not found ]
BeastKit Rootkit [ Not found ]
beX2 Rootkit [ Not found ]
BOBKit Rootkit [ Not found ]
cb Rootkit [ Not found ]
CiNIK Worm (Slapper.B variant) [ Not found ]
Danny-Boy's Abuse Kit [ Not found ]
Devil RootKit [ Not found ]
Dica-Kit Rootkit [ Not found ]
Dreams Rootkit [ Not found ]
Duarawkz Rootkit [ Not found ]
Enye LKM [ Not found ]
Flea Linux Rootkit [ Not found ]
Fu Rootkit [ Not found ]
Fuck`it Rootkit [ Not found ]
GasKit Rootkit [ Not found ]
Heroin LKM [ Not found ]
HjC Kit [ Not found ]
ignoKit Rootkit [ Not found ]
IntoXonia-NG Rootkit [ Not found ]
Irix Rootkit [ Not found ]
Jynx Rootkit [ Not found ]
KBeast Rootkit [ Not found ]
Kitko Rootkit [ Not found ]
Knark Rootkit [ Not found ]
ld-linuxv.so Rootkit [ Not found ]
Li0n Worm [ Not found ]
Lockit / LJK2 Rootkit [ Not found ]
Mood-NT Rootkit [ Not found ]
MRK Rootkit [ Not found ]
Ni0 Rootkit [ Not found ]
Ohhara Rootkit [ Not found ]
Optic Kit (Tux) Worm [ Not found ]
Oz Rootkit [ Not found ]
Phalanx Rootkit [ Not found ]
Phalanx2 Rootkit [ Not found ]
Phalanx2 Rootkit (extended tests) [ Not found ]
Portacelo Rootkit [ Not found ]
R3dstorm Toolkit [ Not found ]
RH-Sharpe's Rootkit [ Not found ]
RSHA's Rootkit [ Not found ]
Scalper Worm [ Not found ]
Sebek LKM [ Not found ]
Shutdown Rootkit [ Not found ]
SHV4 Rootkit [ Not found ]
SHV5 Rootkit [ Not found ]
Sin Rootkit [ Not found ]
Slapper Worm [ Not found ]
Sneakin Rootkit [ Not found ]
'Spanish' Rootkit [ Not found ]
Suckit Rootkit [ Not found ]
Superkit Rootkit [ Not found ]
TBD (Telnet BackDoor) [ Not found ]
TeLeKiT Rootkit [ Not found ]
T0rn Rootkit [ Not found ]
trNkit Rootkit [ Not found ]
Trojanit Kit [ Not found ]
Tuxtendo Rootkit [ Not found ]
URK Rootkit [ Not found ]
Vampire Rootkit [ Not found ]
VcKit Rootkit [ Not found ]
Volc Rootkit [ Not found ]
Xzibit Rootkit [ Not found ]
zaRwT.KiT Rootkit [ Not found ]
ZK Rootkit [ Not found ]
[Press <ENTER> to continue]
Performing additional rootkit checks
Suckit Rookit additional checks [ OK ]
Checking for possible rootkit files and directories [ None found ]
Checking for possible rootkit strings [ None found ]
Performing malware checks
Checking running processes for suspicious files [ None found ]
Checking for login backdoors [ None found ]
Checking for suspicious directories [ None found ]
Checking for sniffer log files [ None found ]
Suspicious Shared Memory segments [ None found ]
Performing Linux specific checks
Checking loaded kernel modules [ OK ]
Checking kernel module names [ OK ]
[Press <ENTER> to continue]
Checking the network...
Performing checks on the network ports
Checking for backdoor ports [ None found ]
Checking for hidden ports [ None found ]
Performing checks on the network interfaces
Checking for promiscuous interfaces [ None found ]
Checking the local host...
Performing system boot checks
Checking for local host name [ Found ]
Checking for system startup files [ Found ]
Checking system startup files for malware [ None found ]
Performing group and account checks
Checking for passwd file [ Found ]
Checking for root equivalent (UID 0) accounts [ None found ]
Checking for passwordless accounts [ None found ]
Checking for passwd file changes [ None found ]
Checking for group file changes [ None found ]
Checking root account shell history files [ None found ]
Performing system configuration file checks
Checking for an SSH configuration file [ Not found ]
Checking for a running system logging daemon [ Found ]
Checking for a system logging configuration file [ Found ]
Checking if syslog remote logging is allowed [ Not allowed ]
Performing filesystem checks
Checking /dev for suspicious file types [ Warning ]
Checking for hidden files and directories [ None found ]
[Press <ENTER> to continue]
System checks summary
=====================
File properties checks...
Files checked: 147
Suspect files: 0
Rootkit checks...
Rootkits checked : 365
Possible rootkits: 0
Applications checks...
All checks skipped
The system checks took: 44 seconds
All results have been written to the log file: /var/log/rkhunter.log
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
|
|
09.03.2016, 12:52
| #2 |
| |  Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Linux Ubuntu- TIGER
__________________Code:
ATTFilter
Security scripts *** 3.2.3, 2008.09.10.09.30 ***
Wed Mar 9 12:01:08 CET 2016
12:01> Beginning security report for bbs-HP-280-G1-MT (x86_64 Linux 4.2.0-16-generic).
# Performing check of passwd files...
# Checking entries from /etc/passwd.
--WARN-- [pass013w] Username `root' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `daemon' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `bin' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `sys' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `sync' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass015w] Login ID sync does not have a valid shell (/bin/sync).
The listed login ID does not have a valid login program or shell.
Usually these are defined in /etc/shells.
--WARN-- [pass013w] Username `games' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `man' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `lp' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `mail' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `news' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `uucp' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `proxy' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `www-data' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `backup' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `list' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `irc' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `gnats' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `nobody' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `systemd-timesync' is not using an acceptable
password hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `systemd-network' is not using an acceptable
password hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `systemd-resolve' is not using an acceptable
password hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `systemd-bus-proxy' is not using an acceptable
password hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `syslog' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `messagebus' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `uuidd' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `avahi' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `whoopsie' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `avahi-autoipd' is not using an acceptable
password hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `dnsmasq' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `colord' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `hplip' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `kernoops' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass016w] User kernoops has / as home directory
The listed login ID should not have "/" (system root directory) as its
home drive. This is a possible security hole.
--WARN-- [pass013w] Username `pulse' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `rtkit' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `saned' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `usbmux' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `lightdm' is not using an acceptable password
hash (x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `bbs' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `smmta' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass013w] Username `smmsp' is not using an acceptable password hash
(x).
The listed username is not using an acceptable, cryptographic method
for the password hash.
--WARN-- [pass012w] Home directory /nonexistent exists multiple times (2) in
/etc/passwd.
The listed home directory is specified for multiple users. This can
lead to denial-of-service and unexpected resource usage (i.e. shell
initialization files, etc) if not corrected.
--WARN-- [pass012w] Home directory /run/systemd exists multiple times (2) in
/etc/passwd.
The listed home directory is specified for multiple users. This can
lead to denial-of-service and unexpected resource usage (i.e. shell
initialization files, etc) if not corrected.
--WARN-- [pass012w] Home directory /var/lib/sendmail exists multiple times (2)
in /etc/passwd.
The listed home directory is specified for multiple users. This can
lead to denial-of-service and unexpected resource usage (i.e. shell
initialization files, etc) if not corrected.
# Performing check of group files...
# Performing check of user accounts...
# Checking accounts from /etc/passwd.
--WARN-- [acc021w] Login ID avahi-autoipd appears to be a dormant account.
The listed login ID appears to be dormant. Files in the home directory
of this user have not been modified in the specified period of time and
after investigation the account may need to be disabled.
--WARN-- [acc021w] Login ID dnsmasq appears to be a dormant account.
The listed login ID appears to be dormant. Files in the home directory
of this user have not been modified in the specified period of time and
after investigation the account may need to be disabled.
--WARN-- [acc006w] Login ID mail's home directory (/var/mail) has group `4096'
and world write access.
The home directory of the listed login ID has group write permission,
world write permission or both enabled. This allows new files to be
added (and existing files potentially removed) by others. The write
permissions should be removed.
--WARN-- [acc022w] Login ID nobody home directory (/nonexistent) is not
accessible.
The listed login ID has a home directory which is not accessible.
This should be checked to see if this is due to networking problem for
remote home directories. Without a valid home directory, the user will
end up with / as the home directory.
# Performing check of /etc/hosts.equiv and .rhosts files...
# Checking accounts from /etc/passwd...
# Performing check of .netrc files...
# Checking accounts from /etc/passwd...
# Performing common access checks for root (in /etc/default/login, /securetty, and /etc/ttytab...
# Performing check of PATH components...
--WARN-- [path009w] /etc/profile does not export an initial setting for PATH.
An initial setting of the PATH variable should be setup in the default
locations for shell login programs (/etc/profile, /etc/csh.login, etc.).
# Only checking user 'root'
--WARN-- [path002w] /usr/bin/bsd-write in root's PATH from default is not
owned by root (owned by tty).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/chage in root's PATH from default is not owned by
root (owned by shadow).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/crontab in root's PATH from default is not owned
by root (owned by crontab).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/dotlockfile in root's PATH from default is not
owned by root (owned by mail).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/expiry in root's PATH from default is not owned
by root (owned by shadow).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/locate in root's PATH from default is not owned
by root (owned by mlocate).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/lockfile in root's PATH from default is not owned
by root (owned by mail).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/mlocate in root's PATH from default is not owned
by root (owned by mlocate).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/ssh-agent in root's PATH from default is not
owned by root (owned by ssh).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/wall in root's PATH from default is not owned by
root (owned by tty).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/bin/write in root's PATH from default is not owned by
root (owned by tty).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/sbin/hoststat in root's PATH from default is not
owned by root (owned by smmsp).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/sbin/purgestat in root's PATH from default is not
owned by root (owned by smmsp).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/sbin/sendmail in root's PATH from default is not
owned by root (owned by smmsp).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/sbin/sendmail-msp in root's PATH from default is not
owned by root (owned by smmsp).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
--WARN-- [path002w] /usr/sbin/sendmail-mta in root's PATH from default is not
owned by root (owned by smmsp).
The indicated file is in root's PATH, but is not owned by root.
This can allow Trojan horse programs or viruses to be planted into these
executables and spread by `root'. Often these executables are owned by
`bin', `uucp' or other system accounts. If these commands are never
used by root, then this is not a problem. If they are, you should
consider changing the owner to `root'. Because of SMI's recent decision
to install most /usr/sbin/* and /usr/bin/* executables as owned by `bin',
this account will not flag a warning.
Linux (notably RedHat) operating environments violate this convention
with printer (lp*) and rpm programs among others. Changing ownership
in this case may be problematic.
# Performing check of anonymous FTP...
# Performing checks of mail aliases...
# Checking aliases from /etc/aliases.
# Checking aliases from .
# Performing check of `cron' entries...
--WARN-- [cron004w] Root crontab does not exist
There is no crontab for the superuser account this is not in itself an
error since many systems might ship without one and use other methods
(/etc/cron* files) to run programs as root. However, if there is no
method for root to run scripts some system checking scripts (like tiger)
might not get executed at all.
--WARN-- [cron005w] Use of cron is not restricted
Cron allows users to submit jobs for the system to do at a particular,
possibly recurring time. It can be very useful, but also has a very
real potential for abuse by either users or system crackers. Users can
be restricted to use cron by creating a /etc/cron.allow (holding only
system administrators) or a /etc/cron.deny file (listing which users are
not allowed access). Depending on the site configuration if none exist
either only root will be able to setup cron tasks or all users will be
permitted. In many systems the default is to allow access to all users.
# Performing check of 'services' ...
# Checking services from /etc/services.
--WARN-- [inet003w] The port for service pop-2 is also assigned to service
pop2.
The indicated port number is assigned to another service. This indicates
either a misconfiguration in the services database, or a possible sign
of an intrusion. This should be checked and corrected. If it is not
apparent why it is like this, the system should be checked for other
signs of intrusion.
--WARN-- [inet003w] The port for service x400-snd is also assigned to service
acr-nema.
The indicated port number is assigned to another service. This indicates
either a misconfiguration in the services database, or a possible sign
of an intrusion. This should be checked and corrected. If it is not
apparent why it is like this, the system should be checked for other
signs of intrusion.
# Performing NFS exports check...
# Performing check of system file permissions...
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/gen_mounts' is not executable (command GET_MOUNTS).
The indicated command does not exist or is not executable. This indicates
a configuration error.
# Checking for known intrusion signs...
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/gen_mounts' is not executable (command GET_MOUNTS).
The indicated command does not exist or is not executable. This indicates
a configuration error.
# Performing check for rookits...
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
--WARN-- [rootkit004w] Chkrootkit has detected a possible rootkit installation
Possible Linux/Ebury - Operation Windigo installetd
The 'chkrootkit' program has detected a possible rootkit installation
A full analysis of the system is recommended to determine the presence
of further signs of intrusion since a rootkit might have been installed.
# Performing system specific checks...
# Performing check of root directory...
# Checking device permissions...
--WARN-- [dev003w] The directory /dev/block resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--WARN-- [dev003w] The directory /dev/char resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--WARN-- [dev003w] The directory /dev/cpu resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--FAIL-- [dev002f] /dev/fuse has world permissions
Devices that have improper (world) permissions might be accessed by any
system user. This might open security holes if these are shared devices
or hold binaries (disks for example). The administrator should properly
set device access (using group configuration to provide access to a
device to multiple users, for example).
--WARN-- [dev003w] The directory /dev/hugepages resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--FAIL-- [dev002f] /dev/kmsg has world permissions
Devices that have improper (world) permissions might be accessed by any
system user. This might open security holes if these are shared devices
or hold binaries (disks for example). The administrator should properly
set device access (using group configuration to provide access to a
device to multiple users, for example).
--WARN-- [dev003w] The directory /dev/mqueue resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--FAIL-- [dev002f] /dev/rfkill has world permissions
Devices that have improper (world) permissions might be accessed by any
system user. This might open security holes if these are shared devices
or hold binaries (disks for example). The administrator should properly
set device access (using group configuration to provide access to a
device to multiple users, for example).
--WARN-- [dev003w] The directory /dev/ubuntu-vg resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
--WARN-- [dev003w] The directory /dev/vfio resides in a device directory.
There is a file in the devices directory which is a common file. Devices
directory should only hold special files although some systems have
directories and shell scripts in /dev. Please check your system's
documentation to determine if that file should be located there.
# Checking for existence of log files...
--FAIL-- [logf005f] Log file /var/log/wtmp permission should be 644
The log file does not have proper permissions set. It is recommended
that you change the permissions to those suggested for these file.
--FAIL-- [logf005f] Log file /var/run/utmp permission should be 644
The log file does not have proper permissions set. It is recommended
that you change the permissions to those suggested for these file.
--FAIL-- [logf007f] Log file /var/log/messages does not exist
The log file "messages" should exist to show a trace of the system
logs (including reboots and kernel messages), it is also often used by
the syslog daemon to log information. The contents of the "messages"
logfile depends upon the configuration of the syslog.conf and varies by
distribution and/or system administrator preference. It might not exist
if you have configured your system to use a different file for logging
or if an intruder has tried to cover his tracks by removing it since
the messages file might contain bad login attempts from local users and
remote hosts.
# Checking for correct umask settings...
--FAIL-- [misc022f] The umask setting in /etc/profile is insecure
The umask setting in the configuration file is insecure. Umask must be
set as to prevent public write (i.e. either 002 or 022).
# Checking listening processes
--WARN-- [lin003w] The process `NetworkMa' is listening on socket 18504 (raw6
on 18504 interface) is run by root.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `cupsd' is listening on socket TCP (0t0 on TCP
interface) is run by root.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `dhclient' is listening on socket UDP (0t0 on
UDP interface) is run by root.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `dnsmasq' is listening on socket TCP (0t0 on
TCP interface) is run by nobody.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `dnsmasq' is listening on socket UDP (0t0 on
UDP interface) is run by nobody.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `gdbus' is listening on socket 0t0 (22u on 0t0
interface) is run by 762.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `gmain' is listening on socket 0t0 (22u on 0t0
interface) is run by 760.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
--WARN-- [lin003w] The process `sendmail-' is listening on socket TCP (0t0 on
TCP interface) is run by root.
Processes that have not been run by a valid user are listening on
interfaces open to external networks. This processes might have been
run by a valid user and changed uids or might be rogue processes.
The list of valid users is defined in Tiger's configuration file (tigerrc)
variable 'Tiger_Listening_ValidUsers'. An incorrect definition there
might also lead to invalid reports and false positives.
To fix this issue, review the value of the configuration variable and
the user the process is associated to. Confirm if the process is running
and is necessary.
If the process is run by a system user, in order to prevent this process
from working, it is often necessary necessary to reconfigure the system
to prevent it from starting when the system boots. If this process is
run by a normal user you might need to review the processes started by
login scripts, desktop confiuration or periodic program execution.
Notice that sometimes services open sporadic UDP listeners to receive
DNS requests, if you receive reports on open UDP services that later on
are closed this might be a false positive.
You can fix these false positives by adjusting the tiger.ignore
configuration file.
# Checking sshd_config configuration files...
--FAIL-- [ssh005w] Cannot find a configuration file for SSH.
Can not find explanation for message-id ssh005w
# Performing common access checks for root...
--FAIL-- [netw020f] There is no /etc/ftpusers file.
There is no ftpusers configuration file. In some systems this might
enable all administrative users (low UID) to access the local FTP server
if it is enabled (some other systems might deprecate its use). It is
recommended that administrative users are added into /etc/ftpusers if
you have a FTP server installed.
# Checking ntpd configuration...
--ERROR-- [init001e] Don't have required command NETSTAT.
The indicated variable, which should specifies the pathname to a command,
does not have a value. This message should not appear on platforms
for which support is listed. If it does appear, then for the missing
commands, if you know the name of the command, then simply place it into
the environment and rerun the checking system.
setenv AWK /usr/bin/awk
./tiger
Or alternately, create a 'site' configuration file and insert an
assignment statement in there of the form:
AWK=/usr/bin/awk
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/getdisks' is not executable (command GETDISKS).
The indicated command does not exist or is not executable. This indicates
a configuration error.
# Performing check of embedded pathnames...
--WARN-- [embed001w] Path `/etc/mail/Makefile' contains `/etc/mail' which is
not owned by root (owned by smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed002w] Path `/etc/mail/Makefile' is not owned by root (owned by
smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
--WARN-- [embed001w] Path `/etc/mail/smrsh/mail.local' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed001w] Path `/etc/mail/smrsh/mail.local' contains
`/etc/mail/smrsh' which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed001w] Path `/etc/mail/smrsh/procmail' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed001w] Path `/etc/mail/smrsh/procmail' contains
`/etc/mail/smrsh' which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed002w] Path `/etc/mail/smrsh/procmail' is not owned by root
(owned by mail).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
--WARN-- [embed001w] Path `/etc/mail/tls/starttls.m4' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed001w] Path `/etc/mail/tls/starttls.m4' contains `/etc/mail/tls'
which is not owned by root (owned by smmsp).
Embedded references in: /etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated pathname to an executable contains a component which is
not owned by root. This can enable an intruder to gain unauthorized
privileges if they are able to replace the binary. See the 'rationale'
explanation for a discussion of the reasons that executables run by root
should be owned by root.
--WARN-- [embed002w] Path `/sbin/unix_chkpwd' is not owned by root (owned by
shadow).
Embedded references in: /usr/bin/ecryptfs-setup-private->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
--WARN-- [embed002w] Path `/usr/lib/sendmail' is not owned by root (owned by
smmsp).
Embedded references in: /usr/bin/bashbug->/default(PATH)
/usr/bin/perlbug->/default(PATH)
/usr/bin/perlthanks->/default(PATH)
/usr/sbin/checksendmail->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
--WARN-- [embed002w] Path `/usr/lib/sm.bin/mailstats' is not owned by root
(owned by smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
--WARN-- [embed002w] Path `/usr/lib/sm.bin/sendmail' is not owned by root
(owned by smmsp).
Embedded references in: /usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
12:01> Security report completed for bbs-HP-280-G1-MT.
See the 'embed' explanation for an explanation of the format of the
embedded references.
The indicated executable is not owned by owned by root. This can enable
an intruder to gain unauthorized privileges if they are able to overwrite
the executable. See the 'rationale' explanation for a discussion of
the reasons that executables run by root should be owned by root.
Note that if the executable is setuid to a non-root ID, then the ownershop
should *NOT* be changed to root unless the setuid bit is also removed.
Code:
ATTFilter Security scripts *** 3.2.3, 2008.09.10.09.30 ***
Wed Mar 9 11:58:23 CET 2016
11:58> Beginning security report for bbs-HP-280-G1-MT (x86_64 Linux 4.2.0-16-generic).
# Performing check of passwd files...
# Checking entries from /etc/passwd.
--WARN-- [pass013w] Username `root' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `daemon' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `bin' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `sys' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `sync' is not using an acceptable password hash
(x).
--WARN-- [pass015w] Login ID sync does not have a valid shell (/bin/sync).
--WARN-- [pass013w] Username `games' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `man' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `lp' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `mail' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `news' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `uucp' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `proxy' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `www-data' is not using an acceptable password
hash (x).
--WARN-- [pass013w] Username `backup' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `list' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `irc' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `gnats' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `nobody' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `systemd-timesync' is not using an acceptable
password hash (x).
--WARN-- [pass013w] Username `systemd-network' is not using an acceptable
password hash (x).
--WARN-- [pass013w] Username `systemd-resolve' is not using an acceptable
password hash (x).
--WARN-- [pass013w] Username `systemd-bus-proxy' is not using an acceptable
password hash (x).
--WARN-- [pass013w] Username `syslog' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `messagebus' is not using an acceptable password
hash (x).
--WARN-- [pass013w] Username `uuidd' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `avahi' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `whoopsie' is not using an acceptable password
hash (x).
--WARN-- [pass013w] Username `avahi-autoipd' is not using an acceptable
password hash (x).
--WARN-- [pass013w] Username `dnsmasq' is not using an acceptable password
hash (x).
--WARN-- [pass013w] Username `colord' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `hplip' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `kernoops' is not using an acceptable password
hash (x).
--WARN-- [pass016w] User kernoops has / as home directory
--WARN-- [pass013w] Username `pulse' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `rtkit' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `saned' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `usbmux' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `lightdm' is not using an acceptable password
hash (x).
--WARN-- [pass013w] Username `bbs' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `smmta' is not using an acceptable password hash
(x).
--WARN-- [pass013w] Username `smmsp' is not using an acceptable password hash
(x).
--WARN-- [pass012w] Home directory /nonexistent exists multiple times (2) in
/etc/passwd.
--WARN-- [pass012w] Home directory /run/systemd exists multiple times (2) in
/etc/passwd.
--WARN-- [pass012w] Home directory /var/lib/sendmail exists multiple times (2)
in /etc/passwd.
# Performing check of group files...
# Performing check of user accounts...
# Checking accounts from /etc/passwd.
--WARN-- [acc021w] Login ID avahi-autoipd appears to be a dormant account.
--WARN-- [acc021w] Login ID dnsmasq appears to be a dormant account.
--WARN-- [acc006w] Login ID mail's home directory (/var/mail) has group `4096'
and world write access.
--WARN-- [acc022w] Login ID nobody home directory (/nonexistent) is not
accessible.
# Performing check of /etc/hosts.equiv and .rhosts files...
# Checking accounts from /etc/passwd...
# Performing check of .netrc files...
# Checking accounts from /etc/passwd...
# Performing common access checks for root (in /etc/default/login, /securetty, and /etc/ttytab...
# Performing check of PATH components...
--WARN-- [path009w] /etc/profile does not export an initial setting for PATH.
# Only checking user 'root'
--WARN-- [path002w] /usr/bin/bsd-write in root's PATH from default is not
owned by root (owned by tty).
--WARN-- [path002w] /usr/bin/chage in root's PATH from default is not owned by
root (owned by shadow).
--WARN-- [path002w] /usr/bin/crontab in root's PATH from default is not owned
by root (owned by crontab).
--WARN-- [path002w] /usr/bin/dotlockfile in root's PATH from default is not
owned by root (owned by mail).
--WARN-- [path002w] /usr/bin/expiry in root's PATH from default is not owned
by root (owned by shadow).
--WARN-- [path002w] /usr/bin/locate in root's PATH from default is not owned
by root (owned by mlocate).
--WARN-- [path002w] /usr/bin/lockfile in root's PATH from default is not owned
by root (owned by mail).
--WARN-- [path002w] /usr/bin/mlocate in root's PATH from default is not owned
by root (owned by mlocate).
--WARN-- [path002w] /usr/bin/ssh-agent in root's PATH from default is not
owned by root (owned by ssh).
--WARN-- [path002w] /usr/bin/wall in root's PATH from default is not owned by
root (owned by tty).
--WARN-- [path002w] /usr/bin/write in root's PATH from default is not owned by
root (owned by tty).
--WARN-- [path002w] /usr/sbin/hoststat in root's PATH from default is not
owned by root (owned by smmsp).
--WARN-- [path002w] /usr/sbin/purgestat in root's PATH from default is not
owned by root (owned by smmsp).
--WARN-- [path002w] /usr/sbin/sendmail in root's PATH from default is not
owned by root (owned by smmsp).
--WARN-- [path002w] /usr/sbin/sendmail-msp in root's PATH from default is not
owned by root (owned by smmsp).
--WARN-- [path002w] /usr/sbin/sendmail-mta in root's PATH from default is not
owned by root (owned by smmsp).
# Performing check of anonymous FTP...
# Performing checks of mail aliases...
# Checking aliases from /etc/aliases.
# Checking aliases from .
# Performing check of `cron' entries...
--WARN-- [cron004w] Root crontab does not exist
--WARN-- [cron005w] Use of cron is not restricted
# Performing check of 'services' ...
# Checking services from /etc/services.
--WARN-- [inet003w] The port for service pop-2 is also assigned to service
pop2.
--WARN-- [inet003w] The port for service x400-snd is also assigned to service
acr-nema.
# Performing NFS exports check...
# Performing check of system file permissions...
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/gen_mounts' is not executable (command GET_MOUNTS).
# Checking for known intrusion signs...
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/gen_mounts' is not executable (command GET_MOUNTS).
# Performing check for rookits...
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
--WARN-- [rootkit004w] Chkrootkit has detected a possible rootkit installation
Possible Linux/Ebury - Operation Windigo installetd
# Performing system specific checks...
# Performing check of root directory...
# Checking device permissions...
--WARN-- [dev003w] The directory /dev/block resides in a device directory.
--WARN-- [dev003w] The directory /dev/char resides in a device directory.
--WARN-- [dev003w] The directory /dev/cpu resides in a device directory.
--FAIL-- [dev002f] /dev/fuse has world permissions
--WARN-- [dev003w] The directory /dev/hugepages resides in a device directory.
--FAIL-- [dev002f] /dev/kmsg has world permissions
--WARN-- [dev003w] The directory /dev/mqueue resides in a device directory.
--FAIL-- [dev002f] /dev/rfkill has world permissions
--WARN-- [dev003w] The directory /dev/ubuntu-vg resides in a device directory.
--WARN-- [dev003w] The directory /dev/vfio resides in a device directory.
# Checking for existence of log files...
--FAIL-- [logf005f] Log file /var/log/wtmp permission should be 644
--FAIL-- [logf005f] Log file /var/run/utmp permission should be 644
--FAIL-- [logf007f] Log file /var/log/messages does not exist
# Checking for correct umask settings...
--FAIL-- [misc022f] The umask setting in /etc/profile is insecure
# Checking listening processes
--WARN-- [lin003w] The process `NetworkMa' is listening on socket 18504 (raw6
on 18504 interface) is run by root.
--WARN-- [lin003w] The process `cupsd' is listening on socket TCP (0t0 on TCP
interface) is run by root.
--WARN-- [lin003w] The process `dhclient' is listening on socket UDP (0t0 on
UDP interface) is run by root.
--WARN-- [lin003w] The process `dnsmasq' is listening on socket TCP (0t0 on
TCP interface) is run by nobody.
--WARN-- [lin003w] The process `dnsmasq' is listening on socket UDP (0t0 on
UDP interface) is run by nobody.
--WARN-- [lin003w] The process `gdbus' is listening on socket 0t0 (22u on 0t0
interface) is run by 762.
--WARN-- [lin003w] The process `gmain' is listening on socket 0t0 (22u on 0t0
interface) is run by 760.
--WARN-- [lin003w] The process `sendmail-' is listening on socket TCP (0t0 on
TCP interface) is run by root.
# Checking sshd_config configuration files...
--FAIL-- [ssh005w] Cannot find a configuration file for SSH.
# Performing common access checks for root...
--FAIL-- [netw020f] There is no /etc/ftpusers file.
# Checking ntpd configuration...
--ERROR-- [init001e] Don't have required command NETSTAT.
--ERROR-- [init004e] `/usr/lib/tiger/systems/default/getdisks' is not executable (command GETDISKS).
# Performing check of embedded pathnames...
--WARN-- [embed001w] Path `/etc/mail/Makefile' contains `/etc/mail' which is
not owned by root (owned by smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
--WARN-- [embed002w] Path `/etc/mail/Makefile' is not owned by root (owned by
smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/smrsh/mail.local' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/smrsh/mail.local' contains
`/etc/mail/smrsh' which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/smrsh/procmail' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/smrsh/procmail' contains
`/etc/mail/smrsh' which is not owned by root (owned by smmsp).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
--WARN-- [embed002w] Path `/etc/mail/smrsh/procmail' is not owned by root
(owned by mail).
Embedded references in: /usr/sbin/sensible-mda->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/tls/starttls.m4' contains `/etc/mail'
which is not owned by root (owned by smmsp).
Embedded references in: /etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
--WARN-- [embed001w] Path `/etc/mail/tls/starttls.m4' contains `/etc/mail/tls'
which is not owned by root (owned by smmsp).
Embedded references in: /etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
--WARN-- [embed002w] Path `/sbin/unix_chkpwd' is not owned by root (owned by
shadow).
Embedded references in: /usr/bin/ecryptfs-setup-private->/default(PATH)
--WARN-- [embed002w] Path `/usr/lib/sendmail' is not owned by root (owned by
smmsp).
Embedded references in: /usr/bin/bashbug->/default(PATH)
/usr/bin/perlbug->/default(PATH)
/usr/bin/perlthanks->/default(PATH)
/usr/sbin/checksendmail->/default(PATH)
--WARN-- [embed002w] Path `/usr/lib/sm.bin/mailstats' is not owned by root
(owned by smmsp).
Embedded references in: /usr/bin/mailq->/default(PATH)
/usr/sbin/mailstats->/default(PATH)
/usr/sbin/newaliases->/default(PATH)
/usr/sbin/runq->/default(PATH)
--WARN-- [embed002w] Path `/usr/lib/sm.bin/sendmail' is not owned by root
(owned by smmsp).
Embedded references in: /usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/bin/mailq->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/mailstats->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/newaliases->/default(PATH)
/usr/share/sendmail/update_conf->/etc/mail/Makefile->/usr/sbin/runq->/default(PATH)
11:58> Security report completed for bbs-HP-280-G1-MT.
Rootkit nimmt Kaspersy auseinander, Hooks So oder ähnlich ist es mit fast alles Anti-Rootkit Tools Zum Beispiel: RougeKiller läuft meist stabil, findet aber auch i.d.r. nur "Hooks" Windows 10: Ein paar Minuten nach der Neuinstallation: Das Rootkit hat schon alles vorbereitet, Win total maipuliert: Eine Zugangsmöglichkeit führt über einen installierten DRuckerserver Ein weiterer Zugriff ging über eine VOIP-Schwachstelle in der FritzBox, wir hatten nie Telefone eingerichtet, schongar nicht mit Rufumleitung Meines Erachtens müssen dies die verstecketen Volumes sein (loop), das Bild zeigt nämlich die Volumes auf der Festplatte; aber es dürfte gar keine geben, weil ich vorher alle Partitionen mit DBAN gelöscht habe. Wenn man sich gegen die Malware wehrt, passiert bei den Security Suiten das: |
|
11.03.2016, 10:01
| #3 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Ja das kenn ich. Diese Probleme hatte ich auch. Das einzige was da hilft sind zwei große Elektromagnete. Den einen an den eigenen Kopf halten und den anderen an den Rechner. Dabei leise oooooooooooooooohm singen. Das ganze 3 mal wiederholen.
__________________ |
|
11.03.2016, 12:57
| #4 |
  | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Braucht es derartige Beiträge (@stephan65) wirklich? |
|
12.03.2016, 22:35
| #5 | |
| /// Helfer-Team   | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBRZitat:
__________________ LG Der Felix Keine Hilfe per PN und E-Mail |
|
14.03.2016, 10:52
| #6 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Da ich mir ziemlich sicher bin, das die Malware auch auch Linux Systeme infiltriert, werde ich hier die Dokumentataion seperat für Ubuntu fortsetzten. Un da ich mich erst ca. 6 Monate mit Linux beschäftige, wäre es super, wenn ihr mir helfen könntet "Auffälligkeiten" herauszustellen, die auf ein verstecktes Rootkit schließen lassen. Bisher liegt eine eindeutige objektive Identifizierung noch nicht vor; mein Infektionsverdacht stützt sich eher auf die Summe viele "kleinerer" Auffälligkeiten. Ich werde das noch versuchen aufzuzeigen. auth log Code:
ATTFilter Mar 13 02:14:37 invisiblethings systemd-logind[728]: New seat seat0.
Mar 13 02:14:37 invisiblethings systemd-logind[728]: Watching system buttons on /dev/input/event2 (Power Button)
Mar 13 02:14:37 invisiblethings systemd-logind[728]: Watching system buttons on /dev/input/event3 (Video Bus)
Mar 13 02:14:37 invisiblethings systemd-logind[728]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 13 02:14:37 invisiblethings systemd-logind[728]: Watching system buttons on /dev/input/event1 (Sleep Button)
Mar 13 02:14:41 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 02:14:41 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 02:14:41 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 02:14:41 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 02:14:41 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 13 02:14:41 invisiblethings systemd-logind[728]: New session c1 of user lightdm.
Mar 13 02:14:41 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Mar 13 02:14:45 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 02:14:45 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 02:14:45 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 02:14:45 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 02:14:45 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 13 02:15:04 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.45" (uid=0 pid=1005 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.11" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 02:15:11 invisiblethings dbus[680]: [system] Failed to activate service 'org.bluez': timed out
Mar 13 02:15:11 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Mar 13 02:15:11 invisiblethings lightdm: pam_unix(lightdm:session): session opened for user adminroot by (uid=0)
Mar 13 02:15:11 invisiblethings systemd-logind[728]: New session c2 of user adminroot.
Mar 13 02:15:11 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user adminroot by (uid=0)
Mar 13 02:15:19 invisiblethings gnome-keyring-daemon[1236]: The Secret Service was already initialized
Mar 13 02:15:19 invisiblethings gnome-keyring-daemon[1236]: The PKCS#11 component was already initialized
Mar 13 02:15:19 invisiblethings gnome-keyring-daemon[1236]: The SSH agent was already initialized
Mar 13 02:15:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.66 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 02:15:43 invisiblethings dbus[680]: [system] Failed to activate service 'org.bluez': timed out
Mar 13 02:16:41 invisiblethings systemd-logind[728]: Removed session c1.
Mar 13 02:16:41 invisiblethings systemd: pam_unix(systemd-user:session): session closed for user lightdm
Mar 13 02:17:01 invisiblethings CRON[2127]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 02:17:01 invisiblethings CRON[2127]: pam_unix(cron:session): session closed for user root
Mar 13 02:45:48 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.45" (uid=0 pid=1005 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.11" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 02:48:07 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install synaptic
Mar 13 02:48:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:48:07 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:51:29 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.91 [/usr/bin/python3 /usr/bin/gnome-language-selector] (owned by unix-user:adminroot)
Mar 13 02:51:52 invisiblethings polkit-agent-helper-1[3628]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 02:51:52 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.91 [/usr/bin/python3 /usr/bin/gnome-language-selector] (owned by unix-user:adminroot)
Mar 13 02:55:26 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/passwd root
Mar 13 02:55:26 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:55:26 invisiblethings passwd[4900]: pam_ecryptfs: PAM passphrase change module retrieved a NULL passphrase; nothing to do
Mar 13 02:55:43 invisiblethings passwd[4900]: pam_unix(passwd:chauthtok): password changed for root
Mar 13 02:55:43 invisiblethings passwd[4900]: gkr-pam: couldn't update the login keyring password: no old password was entered
Mar 13 02:55:43 invisiblethings passwd[4900]: pam_ecryptfs: Passphrase file wrapped
Mar 13 02:55:43 invisiblethings passwd[4900]: pam_ecryptfs: PAM passphrase change module retrieved at least one NULL passphrase; nothing to do
Mar 13 02:55:43 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:57:22 invisiblethings polkit-agent-helper-1[4957]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 02:57:22 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 02:57:57 invisiblethings polkit-agent-helper-1[5399]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 02:57:57 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.change-repository for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 03:12:00 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.45" (uid=0 pid=1005 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.11" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 02:17:01 invisiblethings CRON[5969]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 02:17:01 invisiblethings CRON[5969]: pam_unix(cron:session): session closed for user root
Mar 13 02:18:50 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.45" (uid=0 pid=1005 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.11" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 02:19:22 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.45" (uid=0 pid=1005 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.11" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 02:19:47 invisiblethings polkit-agent-helper-1[6192]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 02:19:47 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.change-repository for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 02:20:22 invisiblethings polkit-agent-helper-1[6231]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 02:20:22 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 02:22:30 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 02:22:30 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 02:22:30 invisiblethings pkexec[6479]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 02:52:44 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables --list
Mar 13 02:52:44 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:52:45 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:53:49 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -F
Mar 13 02:53:49 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:53:49 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:54:20 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P INPUT DROP
Mar 13 02:54:20 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:54:20 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:54:36 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P OUTPUT DROP
Mar 13 02:54:36 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:54:36 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:54:49 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P FORWARD DROP
Mar 13 02:54:49 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:54:49 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:59:11 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service iptables save
Mar 13 02:59:11 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:59:11 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:59:29 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service iptables start
Mar 13 02:59:29 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 02:59:29 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6767:632871 (system bus name :1.144 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 02:59:29 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 02:59:29 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6767:632871 (system bus name :1.144, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:01:03 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables --list
Mar 13 03:01:03 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:01:03 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:01:49 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P OUTPUT ACCEPT
Mar 13 03:01:49 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:01:49 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:02:44 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6811:652385 (system bus name :1.167 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:02:53 invisiblethings polkit-agent-helper-1[6842]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=adminroot rhost= user=adminroot
Mar 13 03:03:06 invisiblethings polkit-agent-helper-1[6843]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:03:06 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.freedesktop.systemd1.manage-units for system-bus-name::1.168 [systemctl start iptables.service] (owned by unix-user:adminroot)
Mar 13 03:03:06 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6811:652385 (system bus name :1.167, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:03:36 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables --list
Mar 13 03:03:36 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:03:36 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:04:18 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A OUTPUT -o lo -j ACCEPT
Mar 13 03:04:18 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:04:18 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:04:52 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -i lo -j ACCEPT
Mar 13 03:04:52 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:04:52 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:06:51 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service iptables save
Mar 13 03:06:51 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:06:51 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:07:37 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service iptables stop
Mar 13 03:07:37 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:07:37 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6895:681692 (system bus name :1.174 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:07:37 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:07:37 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6895:681692 (system bus name :1.174, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:07:52 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables --list
Mar 13 03:07:52 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:07:52 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:09:32 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P INPUT ACCEPT
Mar 13 03:09:32 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:09:32 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:14:38 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 22 -j DROP
Mar 13 03:14:38 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:14:38 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:17:01 invisiblethings CRON[6959]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 03:17:01 invisiblethings CRON[6959]: pam_unix(cron:session): session closed for user root
Mar 13 03:20:04 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 512-j DROP
Mar 13 03:20:04 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:20:04 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:20:29 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 512 -j DROP
Mar 13 03:20:29 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:20:29 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:20:40 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 513 -j DROP
Mar 13 03:20:40 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:20:40 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:21:55 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 123 -j DROP
Mar 13 03:21:55 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:21:55 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:23:07 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 23 -j DROP
Mar 13 03:23:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:23:07 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:23:17 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 6000 -j DROP
Mar 13 03:23:17 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:23:17 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 03:24:44 invisiblethings sudo: adminroot : TTY=pts/16 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/nautilus
Mar 13 03:24:44 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 03:26:12 invisiblethings polkit-agent-helper-1[7488]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:26:12 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 03:26:58 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8175:797802 (system bus name :1.181 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:26:58 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:8175:797802 (system bus name :1.181, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:27:34 invisiblethings groupadd[9746]: group added to /etc/group: name=ntp, GID=129
Mar 13 03:27:35 invisiblethings groupadd[9746]: group added to /etc/gshadow: name=ntp
Mar 13 03:27:35 invisiblethings groupadd[9746]: new group: name=ntp, GID=129
Mar 13 03:27:35 invisiblethings useradd[9751]: new user: name=ntp, UID=120, GID=129, home=/home/ntp, shell=/bin/false
Mar 13 03:27:35 invisiblethings usermod[9756]: change user 'ntp' password
Mar 13 03:27:35 invisiblethings chage[9763]: changed password expiry for ntp
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:9779:801564 (system bus name :1.183 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:9779:801564 (system bus name :1.183, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:9816:801580 (system bus name :1.184 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:9816:801580 (system bus name :1.184, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:9839:801593 (system bus name :1.185 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:27:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:9839:801593 (system bus name :1.185, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:27:45 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:9929:802419 (system bus name :1.186 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:27:45 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:9929:802419 (system bus name :1.186, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:28:27 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 03:28:27 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 03:28:27 invisiblethings pkexec[11100]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 03:29:02 invisiblethings polkit-agent-helper-1[11659]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:29:02 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.freedesktop.systemtoolsbackends.set for system-bus-name::1.190 [mate-users-admin] (owned by unix-user:adminroot)
Mar 13 03:29:45 invisiblethings chpasswd[12506]: pam_ecryptfs: PAM passphrase change module retrieved a NULL passphrase; nothing to do
Mar 13 03:29:45 invisiblethings chpasswd[12506]: pam_unix(chpasswd:chauthtok): new password not acceptable
Mar 13 03:29:45 invisiblethings gpasswd[12575]: user adminroot added by root to group dialout
Mar 13 03:29:45 invisiblethings gpasswd[12641]: user adminroot added by root to group fax
Mar 13 03:29:46 invisiblethings gpasswd[12688]: user adminroot added by root to group floppy
Mar 13 03:29:46 invisiblethings gpasswd[13023]: user adminroot added by root to group tape
Mar 13 03:29:46 invisiblethings gpasswd[13524]: user adminroot added by root to group audio
Mar 13 03:29:46 invisiblethings gpasswd[13825]: user adminroot added by root to group video
Mar 13 03:29:47 invisiblethings gpasswd[14277]: user adminroot added by root to group netdev
Mar 13 03:29:47 invisiblethings gpasswd[14698]: user adminroot added by root to group scanner
Mar 13 03:30:10 invisiblethings gpasswd[15293]: user adminroot added by root to group systemd-bus-proxy
Mar 13 03:30:15 invisiblethings gpasswd[15301]: user adminroot added by root to group systemd-journal
Mar 13 03:30:19 invisiblethings gpasswd[15308]: user adminroot added by root to group systemd-network
Mar 13 03:30:23 invisiblethings gpasswd[15333]: user adminroot added by root to group tty
Mar 13 03:30:30 invisiblethings gpasswd[15402]: user adminroot added by root to group syslog
Mar 13 03:30:45 invisiblethings gpasswd[15508]: user adminroot added by root to group avahi
Mar 13 03:31:06 invisiblethings gpasswd[15518]: user adminroot added by root to group pulse-access
Mar 13 03:31:10 invisiblethings gpasswd[15525]: user adminroot removed by root from group sambashare
Mar 13 03:31:14 invisiblethings gpasswd[15531]: user adminroot added by root to group saned
Mar 13 03:31:19 invisiblethings gpasswd[15537]: user adminroot added by root to group shadow
Mar 13 03:31:27 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 03:31:27 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 03:31:27 invisiblethings pkexec[15550]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 03:31:35 invisiblethings gpasswd[15568]: user adminroot added by root to group root
Mar 13 03:32:00 invisiblethings usermod[15662]: change user 'adminroot' GID from '1000' to '0'
Mar 13 03:32:00 invisiblethings chpasswd[15668]: pam_ecryptfs: PAM passphrase change module retrieved a NULL passphrase; nothing to do
Mar 13 03:32:00 invisiblethings chpasswd[15668]: pam_unix(chpasswd:chauthtok): new password not acceptable
Mar 13 03:36:29 invisiblethings sudo: pam_unix(sudo:auth): conversation failed
Mar 13 03:36:29 invisiblethings sudo: pam_unix(sudo:auth): auth could not identify password for [adminroot]
Mar 13 03:36:30 invisiblethings sudo: pam_unix(sudo:auth): conversation failed
Mar 13 03:36:30 invisiblethings sudo: pam_unix(sudo:auth): auth could not identify password for [adminroot]
Mar 13 03:36:32 invisiblethings sudo: pam_unix(sudo:auth): conversation failed
Mar 13 03:36:32 invisiblethings sudo: pam_unix(sudo:auth): auth could not identify password for [adminroot]
Mar 13 03:38:21 invisiblethings polkit-agent-helper-1[16010]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:38:21 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 03:39:58 invisiblethings polkit-agent-helper-1[16102]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:39:58 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action com.ubuntu.softwareproperties.applychanges for system-bus-name::1.224 [/usr/bin/python3 /usr/bin/software-properties-gtk --open-tab 2 --toplevel 56623112] (owned by unix-user:adminroot)
Mar 13 03:40:29 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 03:40:29 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 03:40:29 invisiblethings pkexec[16126]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 03:43:26 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 03:43:26 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 03:43:26 invisiblethings pkexec[16269]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 03:43:45 invisiblethings polkit-agent-helper-1[16237]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:43:45 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.137 [/usr/bin/python3 /usr/bin/update-manager --no-update --no-focus-on-map] (owned by unix-user:adminroot)
Mar 13 03:44:38 invisiblethings polkit-agent-helper-1[16658]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:44:38 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.233 [/usr/bin/python3 /usr/bin/gnome-language-selector] (owned by unix-user:adminroot)
Mar 13 03:45:26 invisiblethings polkit-agent-helper-1[16678]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 03:45:26 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.102 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 03:45:37 invisiblethings dbus[680]: [system] Rejected send message, 7 matched rules; type="method_call", sender=":1.236" (uid=1000 pid=16691 comm="/usr/bin/python /usr/lib/ubuntu-sso-client/ubuntu-") interface="(unset)" member="Get" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=677 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 03:49:13 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:24440:931216 (system bus name :1.239 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:13 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:24440:931216 (system bus name :1.239, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:24769:933834 (system bus name :1.240 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:24769:933834 (system bus name :1.240, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:24788:933845 (system bus name :1.241 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:24788:933845 (system bus name :1.241, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:24810:933883 (system bus name :1.242 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:39 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:24810:933883 (system bus name :1.242, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:43 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:25781:934296 (system bus name :1.244 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:43 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:25781:934296 (system bus name :1.244, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:45 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26189:934514 (system bus name :1.245 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:46 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26189:934514 (system bus name :1.245, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26214:934739 (system bus name :1.246 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26214:934739 (system bus name :1.246, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26233:934756 (system bus name :1.247 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26233:934756 (system bus name :1.247, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26252:934774 (system bus name :1.248 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26252:934774 (system bus name :1.248, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26271:934787 (system bus name :1.249 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26271:934787 (system bus name :1.249, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26290:934801 (system bus name :1.250 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26290:934801 (system bus name :1.250, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:48 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26309:934813 (system bus name :1.251 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26309:934813 (system bus name :1.251, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26328:934826 (system bus name :1.252 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26328:934826 (system bus name :1.252, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26347:934840 (system bus name :1.253 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26347:934840 (system bus name :1.253, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26366:934854 (system bus name :1.254 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26366:934854 (system bus name :1.254, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26385:934866 (system bus name :1.255 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26385:934866 (system bus name :1.255, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26404:934880 (system bus name :1.256 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26404:934880 (system bus name :1.256, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26423:934891 (system bus name :1.257 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26423:934891 (system bus name :1.257, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26442:934907 (system bus name :1.258 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26442:934907 (system bus name :1.258, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26461:934919 (system bus name :1.259 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26461:934919 (system bus name :1.259, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26480:934933 (system bus name :1.260 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26480:934933 (system bus name :1.260, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26499:934948 (system bus name :1.261 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26499:934948 (system bus name :1.261, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26518:934962 (system bus name :1.262 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26518:934962 (system bus name :1.262, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26537:934978 (system bus name :1.263 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26537:934978 (system bus name :1.263, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26556:934991 (system bus name :1.264 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26556:934991 (system bus name :1.264, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26576:935003 (system bus name :1.265 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:50 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26576:935003 (system bus name :1.265, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26595:935020 (system bus name :1.266 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26595:935020 (system bus name :1.266, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26614:935033 (system bus name :1.267 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26614:935033 (system bus name :1.267, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26634:935047 (system bus name :1.268 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26634:935047 (system bus name :1.268, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26654:935062 (system bus name :1.269 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26654:935062 (system bus name :1.269, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:26674:935076 (system bus name :1.270 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:26674:935076 (system bus name :1.270, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:49:59 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27191:935833 (system bus name :1.272 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:49:59 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27191:935833 (system bus name :1.272, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:25 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27548:938505 (system bus name :1.274 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:25 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27548:938505 (system bus name :1.274, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:26 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27567:938516 (system bus name :1.275 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:26 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27567:938516 (system bus name :1.275, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:26 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27594:938587 (system bus name :1.276 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:26 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27594:938587 (system bus name :1.276, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:29 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27668:938824 (system bus name :1.277 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:29 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27668:938824 (system bus name :1.277, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:29 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27687:938835 (system bus name :1.278 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:29 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27687:938835 (system bus name :1.278, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:43 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27920:940239 (system bus name :1.279 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:43 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27920:940239 (system bus name :1.279, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:43 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27939:940251 (system bus name :1.280 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:43 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27939:940251 (system bus name :1.280, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:50:43 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:27951:940304 (system bus name :1.281 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:50:44 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:27951:940304 (system bus name :1.281, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:51:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:28493:947560 (system bus name :1.282 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:51:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:28493:947560 (system bus name :1.282, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:51:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:28510:947574 (system bus name :1.283 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:51:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:28510:947574 (system bus name :1.283, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:51:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:28527:947595 (system bus name :1.284 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:51:57 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:28527:947595 (system bus name :1.284, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:52:00 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:28583:947972 (system bus name :1.285 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:52:00 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:28583:947972 (system bus name :1.285, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:52:24 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:32414:950391 (system bus name :1.286 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:52:24 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:32414:950391 (system bus name :1.286, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:04 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:7989:954325 (system bus name :1.288 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:04 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:7989:954325 (system bus name :1.288, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:04 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8009:954337 (system bus name :1.289 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:04 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.66 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8075:954655 (system bus name :1.291 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:8075:954655 (system bus name :1.291, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8112:954672 (system bus name :1.292 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:8112:954672 (system bus name :1.292, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8132:954682 (system bus name :1.293 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:07 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:8132:954682 (system bus name :1.293, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:09 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:8162:954879 (system bus name :1.296 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:09 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:8162:954879 (system bus name :1.296, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:18 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:11899:955786 (system bus name :1.297 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:18 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:11899:955786 (system bus name :1.297, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:18 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:11936:955803 (system bus name :1.298 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:18 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:11936:955803 (system bus name :1.298, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:19 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:11961:955913 (system bus name :1.299 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:11961:955913 (system bus name :1.299, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:11998:955927 (system bus name :1.300 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:11998:955927 (system bus name :1.300, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:12021:955940 (system bus name :1.301 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:12021:955940 (system bus name :1.301, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13595:957247 (system bus name :1.302 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13595:957247 (system bus name :1.302, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13632:957262 (system bus name :1.303 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13632:957262 (system bus name :1.303, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13655:957281 (system bus name :1.304 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:33 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13655:957281 (system bus name :1.304, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13725:957542 (system bus name :1.305 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13725:957542 (system bus name :1.305, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13762:957555 (system bus name :1.306 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13762:957555 (system bus name :1.306, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13782:957567 (system bus name :1.307 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:36 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13782:957567 (system bus name :1.307, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:37 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13821:957688 (system bus name :1.310 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:37 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13821:957688 (system bus name :1.310, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:37 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:13841:957699 (system bus name :1.311 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:38 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:13841:957699 (system bus name :1.311, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:55 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:21045:959489 (system bus name :1.317 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:55 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:21045:959489 (system bus name :1.317, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:55 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:21082:959507 (system bus name :1.318 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:21082:959507 (system bus name :1.318, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:21102:959519 (system bus name :1.319 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:21102:959519 (system bus name :1.319, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:21121:959562 (system bus name :1.321 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Geändert von dennissteins (14.03.2016 um 10:54 Uhr) Grund: ERgänzung |
|
14.03.2016, 10:53
| #7 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR auth logs2 Code:
ATTFilter
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:21138:959571 (system bus name :1.322 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:53:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:21138:959571 (system bus name :1.322, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 03:55:28 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 03:55:28 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 03:55:28 invisiblethings pkexec[23758]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 13 03:56:39 invisiblethings systemd-logind[728]: System is rebooting.
Mar 13 03:58:10 invisiblethings systemd-logind[703]: New seat seat0.
Mar 13 03:58:10 invisiblethings systemd-logind[703]: Watching system buttons on /dev/input/event2 (Power Button)
Mar 13 03:58:10 invisiblethings systemd-logind[703]: Watching system buttons on /dev/input/event3 (Video Bus)
Mar 13 03:58:10 invisiblethings systemd-logind[703]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 13 03:58:10 invisiblethings systemd-logind[703]: Watching system buttons on /dev/input/event1 (Sleep Button)
Mar 13 03:58:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 03:58:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 03:58:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 03:58:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 03:58:17 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 13 03:58:17 invisiblethings systemd-logind[703]: New session c1 of user lightdm.
Mar 13 03:58:17 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Mar 13 03:58:21 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 03:58:21 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 03:58:21 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 03:58:21 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 03:58:21 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 13 03:58:38 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Mar 13 03:58:38 invisiblethings lightdm: pam_unix(lightdm:session): session opened for user adminroot by (uid=0)
Mar 13 03:58:38 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user adminroot by (uid=0)
Mar 13 03:58:38 invisiblethings systemd-logind[703]: New session c2 of user adminroot.
Mar 13 03:58:40 invisiblethings dbus[680]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.50" (uid=0 pid=1060 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.9" (uid=0 pid=696 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 03:58:44 invisiblethings gnome-keyring-daemon[1036]: The Secret Service was already initialized
Mar 13 03:58:44 invisiblethings gnome-keyring-daemon[1036]: The PKCS#11 component was already initialized
Mar 13 03:58:45 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.70 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 03:58:48 invisiblethings dbus[680]: [system] Failed to activate service 'org.bluez': timed out
Mar 13 04:00:17 invisiblethings systemd-logind[703]: Removed session c1.
Mar 13 04:00:17 invisiblethings systemd: pam_unix(systemd-user:session): session closed for user lightdm
Mar 13 04:07:23 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-session:c2 (system bus name :1.70, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 04:07:23 invisiblethings systemd-logind[703]: System is powering down.
Mar 13 04:07:23 invisiblethings systemd: pam_unix(systemd-user:session): session closed for user adminroot
Mar 13 10:46:47 invisiblethings systemd-logind[669]: New seat seat0.
Mar 13 10:46:47 invisiblethings systemd-logind[669]: Watching system buttons on /dev/input/event2 (Power Button)
Mar 13 10:46:47 invisiblethings systemd-logind[669]: Watching system buttons on /dev/input/event3 (Video Bus)
Mar 13 10:46:47 invisiblethings systemd-logind[669]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 13 10:46:47 invisiblethings systemd-logind[669]: Watching system buttons on /dev/input/event1 (Sleep Button)
Mar 13 10:46:50 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 10:46:50 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 10:46:50 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 10:46:50 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 10:46:50 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 13 10:46:50 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Mar 13 10:46:50 invisiblethings systemd-logind[669]: New session c1 of user lightdm.
Mar 13 10:46:52 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 10:46:52 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 10:46:52 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 10:46:52 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 10:46:52 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 13 10:47:15 invisiblethings lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=adminroot
Mar 13 10:47:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 13 10:47:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 13 10:47:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 13 10:47:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 13 10:47:17 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 13 10:47:17 invisiblethings dbus[674]: [system] Failed to activate service 'org.bluez': timed out
Mar 13 10:47:45 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Mar 13 10:47:45 invisiblethings lightdm: pam_unix(lightdm:session): session opened for user adminroot by (uid=0)
Mar 13 10:47:45 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user adminroot by (uid=0)
Mar 13 10:47:45 invisiblethings systemd-logind[669]: New session c2 of user adminroot.
Mar 13 10:47:46 invisiblethings gnome-keyring-daemon[995]: The Secret Service was already initialized
Mar 13 10:47:46 invisiblethings gnome-keyring-daemon[995]: The PKCS#11 component was already initialized
Mar 13 10:47:47 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.64 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:47:58 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 10:48:12 invisiblethings dbus[674]: [system] Failed to activate service 'org.bluez': timed out
Mar 13 10:48:50 invisiblethings systemd-logind[669]: Removed session c1.
Mar 13 10:49:11 invisiblethings polkit-agent-helper-1[4385]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 10:49:11 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.90 [/usr/bin/unity-scope-loader applications/applications.scope applications/scopes.scope commands.scope] (owned by unix-user:adminroot)
Mar 13 10:50:13 invisiblethings polkit-agent-helper-1[11163]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 10:50:13 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.gufw for unix-process:11093:29634 [/bin/sh /usr/bin/gufw] (owned by unix-user:adminroot)
Mar 13 10:50:13 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 10:50:13 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 10:50:13 invisiblethings pkexec[11124]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/gufw-pkexec adminroot]
Mar 13 10:50:25 invisiblethings polkit-agent-helper-1[13357]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 10:50:25 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 10:50:29 invisiblethings polkit-agent-helper-1[15083]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 10:50:29 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 10:56:01 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:17133:65069 (system bus name :1.100 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:56:01 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:17133:65069 (system bus name :1.100, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 10:57:01 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:20417:71054 (system bus name :1.103 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:57:01 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:20417:71054 (system bus name :1.103, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 10:57:01 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:20459:71071 (system bus name :1.104 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:57:01 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:20459:71071 (system bus name :1.104, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 10:57:01 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:20484:71086 (system bus name :1.105 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:57:02 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:20484:71086 (system bus name :1.105, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 10:57:51 invisiblethings su[23585]: Successful su for www-data by root
Mar 13 10:57:51 invisiblethings su[23585]: + ??? root:www-data
Mar 13 10:57:51 invisiblethings su[23585]: pam_unix(su:session): session opened for user www-data by (uid=0)
Mar 13 10:57:51 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user www-data by (uid=0)
Mar 13 10:57:51 invisiblethings systemd-logind[669]: New session c3 of user www-data.
Mar 13 10:57:51 invisiblethings su[23585]: pam_unix(su:session): session closed for user www-data
Mar 13 10:57:51 invisiblethings systemd-logind[669]: Removed session c3.
Mar 13 10:58:00 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:24268:76923 (system bus name :1.108 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 10:58:00 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:24268:76923 (system bus name :1.108, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 11:15:37 invisiblethings polkit-agent-helper-1[30075]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 11:15:37 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 11:16:18 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install encfs
Mar 13 11:16:18 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:16:21 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:16:41 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install encfs
Mar 13 11:16:41 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:16:55 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:17:01 invisiblethings CRON[4745]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 11:17:01 invisiblethings CRON[4745]: pam_unix(cron:session): session closed for user root
Mar 13 11:17:30 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/gpasswd -a adminroot fuse
Mar 13 11:17:30 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:17:30 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:17:44 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/newgrp fuse
Mar 13 11:17:44 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:17:44 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:18:02 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/gpasswd -a adminroot fuse
Mar 13 11:18:02 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:18:02 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:18:33 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install apturl
Mar 13 11:18:34 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:18:34 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:20:04 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install gnome-encfs-manager
Mar 13 11:20:04 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:20:04 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:21:58 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install gnome-encfs-manager
Mar 13 11:21:58 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 11:21:58 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 11:23:27 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:17316:229423 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:adminroot)
Mar 13 11:23:27 invisiblethings pkexec[17322]: adminroot: Error executing command as another user: Request dismissed [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/sbin/synaptic]
Mar 13 11:24:32 invisiblethings polkit-agent-helper-1[19072]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 11:24:32 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 11:29:06 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30866:263553 (system bus name :1.120 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 11:29:06 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30866:263553 (system bus name :1.120, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 11:29:06 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30904:263609 (system bus name :1.121 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 11:29:07 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30904:263609 (system bus name :1.121, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 11:30:29 invisiblethings polkit-agent-helper-1[1671]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 11:30:29 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 12:17:01 invisiblethings CRON[30425]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 12:17:01 invisiblethings CRON[30425]: pam_unix(cron:session): session closed for user root
Mar 13 13:00:36 invisiblethings compiz: gkr-pam: unlocked login keyring
Mar 13 13:03:06 invisiblethings polkit-agent-helper-1[22892]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 13:03:06 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.change-repository for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 13:04:02 invisiblethings sudo: adminroot : TTY=pts/17 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 22 --sport 1024:65535 -j DROP
Mar 13 13:04:02 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 13:04:02 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 13:06:48 invisiblethings polkit-agent-helper-1[27940]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=adminroot rhost= user=adminroot
Mar 13 13:06:56 invisiblethings polkit-agent-helper-1[28146]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 13:06:56 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 13:08:28 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:595:859784 (system bus name :1.143 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:08:29 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:595:859784 (system bus name :1.143, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:10:19 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6535:870903 (system bus name :1.144 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:10:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6535:870903 (system bus name :1.144, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:10:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6557:870928 (system bus name :1.145 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:10:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6557:870928 (system bus name :1.145, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:10:20 invisiblethings groupadd[6594]: group added to /etc/group: name=vboxusers, GID=130
Mar 13 13:10:20 invisiblethings groupadd[6594]: group added to /etc/gshadow: name=vboxusers
Mar 13 13:10:20 invisiblethings groupadd[6594]: new group: name=vboxusers, GID=130
Mar 13 13:10:21 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6755:871033 (system bus name :1.146 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:10:21 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6755:871033 (system bus name :1.146, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:10:21 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6783:871057 (system bus name :1.147 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:10:21 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6783:871057 (system bus name :1.147, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:10:25 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6950:871447 (system bus name :1.148 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:10:25 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6950:871447 (system bus name :1.148, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:14:17 invisiblethings polkit-agent-helper-1[13808]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 13:14:17 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 13:16:51 invisiblethings sudo: adminroot : TTY=unknown ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/cryptkeeper
Mar 13 13:16:51 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 13 13:17:01 invisiblethings CRON[18739]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 13:17:01 invisiblethings CRON[18739]: pam_unix(cron:session): session closed for user root
Mar 13 13:22:10 invisiblethings polkit-agent-helper-1[28411]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 13:22:10 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.84 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 13 13:29:01 invisiblethings polkit-agent-helper-1[9827]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 13:29:01 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:9804:982617 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:adminroot)
Mar 13 13:29:01 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 13:29:02 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 13:29:02 invisiblethings pkexec[9811]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/sbin/synaptic]
Mar 13 13:40:15 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:29582:1050376 (system bus name :1.162 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:22 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:29582:1050376 (system bus name :1.162, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:35 invisiblethings groupadd[30167]: group added to /etc/group: name=smmta, GID=131
Mar 13 13:40:35 invisiblethings groupadd[30167]: group added to /etc/gshadow: name=smmta
Mar 13 13:40:35 invisiblethings groupadd[30167]: new group: name=smmta, GID=131
Mar 13 13:40:35 invisiblethings useradd[30185]: new user: name=smmta, UID=121, GID=131, home=/var/lib/sendmail, shell=/bin/false
Mar 13 13:40:36 invisiblethings usermod[30205]: change user 'smmta' password
Mar 13 13:40:37 invisiblethings chage[30220]: changed password expiry for smmta
Mar 13 13:40:38 invisiblethings chfn[30238]: changed user 'smmta' information
Mar 13 13:40:38 invisiblethings groupadd[30288]: group added to /etc/group: name=smmsp, GID=132
Mar 13 13:40:38 invisiblethings groupadd[30288]: group added to /etc/gshadow: name=smmsp
Mar 13 13:40:38 invisiblethings groupadd[30288]: new group: name=smmsp, GID=132
Mar 13 13:40:38 invisiblethings useradd[30304]: new user: name=smmsp, UID=122, GID=132, home=/var/lib/sendmail, shell=/bin/false
Mar 13 13:40:39 invisiblethings usermod[30321]: change user 'smmsp' password
Mar 13 13:40:39 invisiblethings chage[30336]: changed password expiry for smmsp
Mar 13 13:40:39 invisiblethings chfn[30339]: changed user 'smmsp' information
Mar 13 13:40:42 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30469:1053132 (system bus name :1.163 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:42 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30469:1053132 (system bus name :1.163, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:42 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30497:1053163 (system bus name :1.164 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:42 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30497:1053163 (system bus name :1.164, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:44 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30593:1053333 (system bus name :1.165 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:44 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30593:1053333 (system bus name :1.165, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:44 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:30617:1053347 (system bus name :1.166 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:44 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:30617:1053347 (system bus name :1.166, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:31422:1053838 (system bus name :1.167 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:49 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:31422:1053838 (system bus name :1.167, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 13:40:49 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:31449:1053857 (system bus name :1.168 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 13:40:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:31449:1053857 (system bus name :1.168, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:00:03 invisiblethings CRON[10353]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 14:00:04 invisiblethings CRON[10353]: pam_unix(cron:session): session closed for user smmsp
Mar 13 14:00:49 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action com.ubuntu.apport.apport-gtk-root for unix-process:1002:15442 [/sbin/upstart --user] (owned by unix-user:adminroot)
Mar 13 14:00:49 invisiblethings pkexec[11680]: adminroot: Error executing command as another user: Request dismissed [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/share/apport/apport-gtk]
Mar 13 14:01:19 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:12763:1176865 (system bus name :1.174 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:01:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:12763:1176865 (system bus name :1.174, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:01:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:12838:1176983 (system bus name :1.175 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:01:20 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:12838:1176983 (system bus name :1.175, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:01:20 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:12870:1177012 (system bus name :1.176 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:01:21 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:12870:1177012 (system bus name :1.176, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:03:23 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:29883:1189263 (system bus name :1.180 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:03:23 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:29883:1189263 (system bus name :1.180, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:03:23 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:29908:1189287 (system bus name :1.181 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:03:23 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:29908:1189287 (system bus name :1.181, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:03:23 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:29952:1189316 (system bus name :1.182 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:03:24 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:29952:1189316 (system bus name :1.182, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:03:24 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:29977:1189334 (system bus name :1.183 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:03:27 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:29977:1189334 (system bus name :1.183, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:03:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:31676:1192048 (system bus name :1.184 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 14:03:51 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:31676:1192048 (system bus name :1.184, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 14:17:01 invisiblethings CRON[28159]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 14:17:01 invisiblethings CRON[28159]: pam_unix(cron:session): session closed for user root
Mar 13 14:20:01 invisiblethings CRON[2399]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 14:20:01 invisiblethings CRON[2399]: pam_unix(cron:session): session closed for user smmsp
Mar 13 14:40:02 invisiblethings CRON[12976]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 14:40:02 invisiblethings CRON[12976]: pam_unix(cron:session): session closed for user smmsp
Mar 13 14:47:39 invisiblethings compiz: gkr-pam: unlocked login keyring
Mar 13 14:49:27 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install fail2ban
Mar 13 14:49:27 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 14:49:32 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 14:49:46 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get autoremove
Mar 13 14:49:46 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 14:51:37 invisiblethings sudo: pam_unix(sudo:auth): authentication failure; logname=adminroot uid=1000 euid=0 tty=/dev/pts/20 ruser=adminroot rhost= user=adminroot
Mar 13 14:51:51 invisiblethings sudo: adminroot : TTY=pts/20 ; PWD=/home/adminroot ; USER=root ; COMMAND=/etc/init.d/fail2ban
Mar 13 14:51:51 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 14:51:53 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 14:52:17 invisiblethings sudo: adminroot : TTY=pts/20 ; PWD=/home/adminroot ; USER=root ; COMMAND=/etc/init.d/fail2ban force-start
Mar 13 14:52:17 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 14:52:21 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 14:52:37 invisiblethings sudo: adminroot : TTY=pts/20 ; PWD=/home/adminroot ; USER=root ; COMMAND=/etc/init.d/fail2ban status
Mar 13 14:52:37 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 14:52:41 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 14:53:47 invisiblethings sudo: adminroot : TTY=unknown ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/geany /etc/fail2ban/jail.conf.
Mar 13 14:53:47 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 13 14:57:30 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 14:58:29 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.193" (uid=1000 pid=2304 comm="/usr/lib/firefox/firefox ")
Mar 13 14:58:29 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.193" (uid=1000 pid=2304 comm="/usr/lib/firefox/firefox ")
Mar 13 15:00:01 invisiblethings CRON[19092]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 15:00:01 invisiblethings CRON[19093]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 15:00:04 invisiblethings CRON[19092]: pam_unix(cron:session): session closed for user smmsp
Mar 13 15:00:05 invisiblethings CRON[19093]: pam_unix(cron:session): session closed for user root
Mar 13 15:00:07 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/bin/cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local
Mar 13 15:00:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:00:07 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:00:19 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/vi /etc/fail2ban/jail.local
Mar 13 15:00:19 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:01:51 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/geany /etc/fail2ban/jail.local
Mar 13 15:01:51 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:09:03 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service fail2ban restart
Mar 13 15:09:04 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:09:04 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:5667:1583296 (system bus name :1.195 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 15:09:08 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:09:08 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:5667:1583296 (system bus name :1.195, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 15:09:18 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:09:21 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service fail2ban restart
Mar 13 15:09:21 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:09:21 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:6268:1585058 (system bus name :1.196 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 15:09:21 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:6268:1585058 (system bus name :1.196, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 15:09:21 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:09:33 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/fail2ban-client status
Mar 13 15:09:33 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:09:33 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:09:47 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -L
Mar 13 15:09:47 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:09:47 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:12:04 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P INPUT DROP
Mar 13 15:12:04 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:12:04 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:12:16 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P FORWARD DROP
Mar 13 15:12:16 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:12:16 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:12:41 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -P OUTPUT ACCEPT
Mar 13 15:12:41 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:12:41 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:13:07 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
Mar 13 15:13:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:13:07 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:13:35 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
Mar 13 15:13:35 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:13:35 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:14:45 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables -A INPUT -p tcp --dport 22 --sport 1:65535 -j DROP
Mar 13 15:14:46 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:14:46 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:15:59 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service fail2ban restart
Mar 13 15:15:59 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:15:59 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:32593:1624842 (system bus name :1.199 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 13 15:16:00 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:32593:1624842 (system bus name :1.199, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 15:16:00 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:16:21 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/bin/systemctl status fail2ban.service
Mar 13 15:16:21 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:16:21 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:17:01 invisiblethings CRON[5406]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 15:17:01 invisiblethings CRON[5406]: pam_unix(cron:session): session closed for user root
Mar 13 15:17:30 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service fail2ban enable
Mar 13 15:17:30 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:17:31 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:17:51 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/service fail2ban force-start
Mar 13 15:17:51 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:17:52 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:18:18 invisiblethings polkit-agent-helper-1[11301]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 13 15:18:18 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.gufw for unix-process:11044:1637914 [/bin/sh /usr/bin/gufw] (owned by unix-user:adminroot)
Mar 13 15:18:18 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 13 15:18:18 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 13 15:18:18 invisiblethings pkexec[11056]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/gufw-pkexec adminroot]
Mar 13 15:20:02 invisiblethings CRON[18942]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 15:21:03 invisiblethings CRON[18942]: pam_unix(cron:session): session closed for user smmsp
Mar 13 15:21:19 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/sbin/iptables --list
Mar 13 15:21:19 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:21:19 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:22:15 invisiblethings sudo: adminroot : TTY=pts/22 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/nautilus
Mar 13 15:22:15 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:23:11 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 15:40:05 invisiblethings CRON[5836]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 15:41:08 invisiblethings CRON[5836]: pam_unix(cron:session): session closed for user smmsp
Mar 13 15:41:40 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 15:42:01 invisiblethings sudo: adminroot : TTY=pts/19 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/tcpdump
Mar 13 15:42:01 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:44:06 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:44:09 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 15:45:50 invisiblethings sudo: pam_unix(sudo:auth): conversation failed
Mar 13 15:45:50 invisiblethings sudo: pam_unix(sudo:auth): auth could not identify password for [adminroot]
Mar 13 15:46:08 invisiblethings sudo: adminroot : TTY=pts/18 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/tcpdump -vv
Mar 13 15:46:08 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 13 15:51:46 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.gufw for unix-process:7069:1839058 [/bin/sh /usr/bin/gufw] (owned by unix-user:adminroot)
Mar 13 15:51:46 invisiblethings pkexec[7078]: adminroot: Error executing command as another user: Request dismissed [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/gufw-pkexec adminroot]
Mar 13 15:53:54 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.213" (uid=1000 pid=8129 comm="gedit /home/adminroot/Schreibtisch/tcpdump ")
Mar 13 15:53:54 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.213" (uid=1000 pid=8129 comm="gedit /home/adminroot/Schreibtisch/tcpdump ")
Mar 13 15:57:44 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.216" (uid=1000 pid=8129 comm="gedit /home/adminroot/Schreibtisch/tcpdump ")
Mar 13 15:57:44 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.216" (uid=1000 pid=8129 comm="gedit /home/adminroot/Schreibtisch/tcpdump ")
Mar 13 16:00:01 invisiblethings CRON[1323]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 13 16:00:01 invisiblethings CRON[1322]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 13 16:00:04 invisiblethings CRON[1322]: pam_unix(cron:session): session closed for user smmsp
Mar 13 16:00:05 invisiblethings CRON[1323]: pam_unix(cron:session): session closed for user root
Mar 13 16:02:50 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.218" (uid=1000 pid=14296 comm="gedit /home/adminroot/Schreibtisch/Unbenanntes Dok")
Mar 13 16:02:50 invisiblethings dbus[674]: [system] Rejected send message, 9 matched rules; type="method_return", sender=":1.2" (uid=107 pid=665 comm="avahi-daemon: starting up ") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.218" (uid=1000 pid=14296 comm="gedit /home/adminroot/Schreibtisch/Unbenanntes Dok")
Mar 13 16:04:12 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 16:04:23 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 16:04:26 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 13 16:04:32 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 16:04:35 invisiblethings dbus[674]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=1654 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=664 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 13 16:07:21 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-session:c2 (system bus name :1.64, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 13 16:07:26 invisiblethings systemd-logind[669]: Delay lock is active (UID 1000/adminroot, PID 1156/gnome-session) but inhibitor timeout is reached.
Mar 13 16:07:26 invisiblethings systemd-logind[669]: System is powering down.
Mar 14 00:44:38 invisiblethings systemd-logind[727]: New seat seat0.
Mar 14 00:44:38 invisiblethings systemd-logind[727]: Watching system buttons on /dev/input/event2 (Power Button)
Mar 14 00:44:38 invisiblethings systemd-logind[727]: Watching system buttons on /dev/input/event3 (Video Bus)
Mar 14 00:44:38 invisiblethings systemd-logind[727]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 14 00:44:38 invisiblethings systemd-logind[727]: Watching system buttons on /dev/input/event1 (Sleep Button)
Mar 14 00:44:48 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 14 00:44:48 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 14 00:44:48 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 14 00:44:48 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 14 00:44:48 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 14 00:44:48 invisiblethings systemd-logind[727]: New session c1 of user lightdm.
Mar 14 00:44:48 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Mar 14 00:44:53 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 14 00:44:53 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 14 00:44:53 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 14 00:44:53 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 14 00:44:53 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 14 00:45:16 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Mar 14 00:45:16 invisiblethings lightdm: pam_unix(lightdm:session): session opened for user adminroot by (uid=0)
Mar 14 00:45:16 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user adminroot by (uid=0)
Mar 14 00:45:16 invisiblethings systemd-logind[727]: New session c2 of user adminroot.
Mar 14 00:45:19 invisiblethings dbus[741]: [system] Failed to activate service 'org.bluez': timed out
Mar 14 00:45:22 invisiblethings gnome-keyring-daemon[1255]: The Secret Service was already initialized
Mar 14 00:45:22 invisiblethings gnome-keyring-daemon[1255]: The PKCS#11 component was already initialized
Mar 14 00:45:23 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.60 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 00:45:47 invisiblethings dbus[741]: [system] Failed to activate service 'org.bluez': timed out
Mar 14 00:46:32 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action com.ubuntu.apport.apport-gtk-root for unix-process:6585:15491 [update-notifier] (owned by unix-user:adminroot)
Mar 14 00:46:32 invisiblethings pkexec[7530]: adminroot: Error executing command as another user: Request dismissed [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/share/apport/apport-gtk]
Mar 14 00:46:47 invisiblethings polkit-agent-helper-1[8566]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 00:46:47 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.gufw for unix-process:8553:17296 [/bin/sh /usr/bin/gufw] (owned by unix-user:adminroot)
Mar 14 00:46:47 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 00:46:47 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 00:46:47 invisiblethings pkexec[8559]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/gufw-pkexec adminroot]
Mar 14 00:46:48 invisiblethings systemd-logind[727]: Removed session c1.
Mar 14 00:47:20 invisiblethings dbus[741]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.92" (uid=0 pid=13001 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.10" (uid=0 pid=788 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 14 00:54:01 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get clean
Mar 14 00:54:01 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:54:01 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 00:55:34 invisiblethings polkit-agent-helper-1[5326]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 00:55:34 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.95 [/usr/bin/python /usr/bin/software-center apt://encfs] (owned by unix-user:adminroot)
Mar 14 00:55:46 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/aptitude install encfs
Mar 14 00:55:46 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:55:49 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 00:55:54 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/aptitude install encfs
Mar 14 00:55:54 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:56:18 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 00:56:52 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/gpasswd -a adminroot fuse
Mar 14 00:56:52 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:56:52 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 00:57:20 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/newgrp fuse
Mar 14 00:57:20 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:57:20 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 00:57:43 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install cryptkeeper
Mar 14 00:57:43 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 00:57:52 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:00:01 invisiblethings CRON[2986]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 14 01:00:01 invisiblethings CRON[2985]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 14 01:00:01 invisiblethings CRON[2985]: pam_unix(cron:session): session closed for user smmsp
Mar 14 01:00:02 invisiblethings CRON[2986]: pam_unix(cron:session): session closed for user root
Mar 14 01:01:01 invisiblethings polkit-agent-helper-1[8312]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:01:01 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.95 [/usr/bin/python /usr/bin/software-center apt://encfs] (owned by unix-user:adminroot)
Mar 14 01:01:30 invisiblethings su[11492]: Successful su for www-data by root
Mar 14 01:01:30 invisiblethings su[11492]: + ??? root:www-data
Mar 14 01:01:30 invisiblethings su[11492]: pam_unix(su:session): session opened for user www-data by (uid=0)
Mar 14 01:01:30 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user www-data by (uid=0)
Mar 14 01:01:30 invisiblethings systemd-logind[727]: New session c3 of user www-data.
Mar 14 01:01:30 invisiblethings su[11492]: pam_unix(su:session): session closed for user www-data
Mar 14 01:01:31 invisiblethings systemd-logind[727]: Removed session c3.
Mar 14 01:01:32 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:01:32 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:01:32 invisiblethings pkexec[11549]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:03:27 invisiblethings polkitd(authority=local): Operator of unix-session:c2 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:21004:117756 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:adminroot)
Mar 14 01:03:27 invisiblethings pkexec[21008]: adminroot: Error executing command as another user: Request dismissed [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/sbin/synaptic]
Mar 14 01:04:25 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:04:25 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:04:25 invisiblethings pkexec[26726]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:05:00 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:31600:127234 (system bus name :1.116 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:00 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:31600:127234 (system bus name :1.116, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:02 invisiblethings groupadd[31826]: group added to /etc/group: name=clamav, GID=133
Mar 14 01:05:02 invisiblethings groupadd[31826]: group added to /etc/gshadow: name=clamav
Mar 14 01:05:02 invisiblethings groupadd[31826]: new group: name=clamav, GID=133
Mar 14 01:05:03 invisiblethings useradd[31847]: new user: name=clamav, UID=123, GID=133, home=/var/lib/clamav, shell=/bin/false
Mar 14 01:05:03 invisiblethings chage[31902]: changed password expiry for clamav
Mar 14 01:05:03 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:31944:127580 (system bus name :1.117 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:03 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:31944:127580 (system bus name :1.117, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:11 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:32733:128353 (system bus name :1.118 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:11 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:32733:128353 (system bus name :1.118, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:51 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:4350:132418 (system bus name :1.119 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:52 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:4350:132418 (system bus name :1.119, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:55 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:5546:132804 (system bus name :1.120 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:55 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:5546:132804 (system bus name :1.120, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:5582:132830 (system bus name :1.121 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:5582:132830 (system bus name :1.121, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:5643:132865 (system bus name :1.122 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:5643:132865 (system bus name :1.122, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:5673:132887 (system bus name :1.123 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:05:56 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:5673:132887 (system bus name :1.123, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:06:12 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-process:7584:134486 (system bus name :1.124 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 01:06:12 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-process:7584:134486 (system bus name :1.124, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:06:35 invisiblethings polkit-agent-helper-1[9188]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:06:35 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.95 [/usr/bin/python /usr/bin/software-center apt://encfs] (owned by unix-user:adminroot)
Mar 14 01:06:38 invisiblethings su[9994]: Successful su for adminroot by root
Mar 14 01:06:38 invisiblethings su[9994]: + ??? root:adminroot
Mar 14 01:06:38 invisiblethings su[9994]: pam_unix(su:session): session opened for user adminroot by (uid=0)
Mar 14 01:06:38 invisiblethings su[9994]: pam_systemd(su:session): Cannot create session: Already running in a session
Mar 14 01:06:38 invisiblethings su[9994]: pam_unix(su:session): session closed for user adminroot
Mar 14 01:07:25 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:07:25 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:07:25 invisiblethings pkexec[15131]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:10:25 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:10:25 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:10:25 invisiblethings pkexec[1154]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:17:01 invisiblethings CRON[10817]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 14 01:17:01 invisiblethings CRON[10817]: pam_unix(cron:session): session closed for user root
Mar 14 01:17:03 invisiblethings polkit-agent-helper-1[10463]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:17:03 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action com.ubuntu.systemservice.setproxy for system-bus-name::1.100 [unity-control-center] (owned by unix-user:adminroot)
Mar 14 01:20:01 invisiblethings CRON[29148]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 14 01:20:01 invisiblethings CRON[29148]: pam_unix(cron:session): session closed for user smmsp
Mar 14 01:23:07 invisiblethings polkit-agent-helper-1[16196]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:23:07 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:16186:235383 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:adminroot)
Mar 14 01:23:07 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:23:07 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:23:07 invisiblethings pkexec[16189]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/sbin/synaptic]
Mar 14 01:26:25 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/home/adminroot/Musik/buck-security-master/buck-security
Mar 14 01:26:25 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:26:25 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:28:02 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot/Musik/buck-security-master ; USER=root ; COMMAND=./buck-security
Mar 14 01:28:02 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:28:02 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:29:58 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot/Musik/buck-security-master ; USER=root ; COMMAND=./buck-security --make-checksums
Mar 14 01:29:58 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:29:58 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:30:34 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot/Musik/buck-security-master ; USER=root ; COMMAND=./buck-security --output=3
Mar 14 01:30:34 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:30:34 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:30:47 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot/Musik/buck-security-master ; USER=root ; COMMAND=./buck-security
Mar 14 01:30:47 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:30:48 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:31:45 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot/Musik/buck-security-master ; USER=root ; COMMAND=/usr/bin/apt-get install chkrootkit
Mar 14 01:31:45 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:31:45 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:32:01 invisiblethings sudo: pam_unix(sudo:auth): authentication failure; logname=adminroot uid=1000 euid=0 tty=/dev/pts/1 ruser=adminroot rhost= user=adminroot
Mar 14 01:32:07 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install chkrootkit
Mar 14 01:32:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:32:08 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:32:17 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/chkrootkit
Mar 14 01:32:17 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:32:22 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:33:18 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install rkhunter
Mar 14 01:33:18 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:34:04 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:34:07 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/rkhunter --update
Mar 14 01:34:07 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:34:11 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:34:24 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/rkhunter --propupd --update
Mar 14 01:34:24 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:34:25 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:34:25 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:34:25 invisiblethings pkexec[14537]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:34:34 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:35:03 invisiblethings sudo: adminroot : TTY=pts/1 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/rkhunter -c --display-logfile
Mar 14 01:35:03 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:35:04 invisiblethings Rootkit Hunter: Rootkit hunter check started (version 1.4.2)
Mar 14 01:36:04 invisiblethings sudo: adminroot : TTY=pts/3 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install lynis
Mar 14 01:36:04 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:36:05 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:36:20 invisiblethings Rootkit Hunter: Scanning took 1 minute and 16 seconds
Mar 14 01:36:20 invisiblethings Rootkit Hunter: Please inspect this machine, because it may be infected.
Mar 14 01:36:20 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:36:22 invisiblethings sudo: adminroot : TTY=pts/3 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/apt-get install manpages-de
Mar 14 01:36:22 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:36:30 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:37:20 invisiblethings sudo: adminroot : TTY=pts/3 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/lynis
Mar 14 01:37:20 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:37:20 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:37:25 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:37:25 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:37:25 invisiblethings pkexec[28240]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:38:23 invisiblethings sudo: adminroot : TTY=pts/3 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/sbin/lynis audit system
Mar 14 01:38:23 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
Mar 14 01:40:01 invisiblethings CRON[10162]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
Mar 14 01:40:01 invisiblethings CRON[10162]: pam_unix(cron:session): session closed for user smmsp
Mar 14 01:41:18 invisiblethings sudo: pam_unix(sudo:session): session closed for user root
Mar 14 01:41:55 invisiblethings polkit-agent-helper-1[27748]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:41:55 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain TEMPORARY authorization for action org.debian.apt.install-or-remove-packages for system-bus-name::1.173 [/usr/bin/python /usr/bin/software-center] (owned by unix-user:adminroot)
Mar 14 01:43:13 invisiblethings polkit-agent-helper-1[3765]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:43:13 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.synaptic for unix-process:3755:355625 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:adminroot)
Mar 14 01:43:13 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:43:13 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:43:13 invisiblethings pkexec[3759]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/sbin/synaptic]
Mar 14 01:43:27 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:43:27 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:43:27 invisiblethings pkexec[5886]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:49:22 invisiblethings polkit-agent-helper-1[18396]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 01:49:22 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.canonical.xdiagnose.pkexec for unix-process:1262:8933 [/sbin/upstart --user] (owned by unix-user:adminroot)
Mar 14 01:49:22 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:49:22 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:49:22 invisiblethings pkexec[18381]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/xdiagnose]
Mar 14 01:49:31 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 01:49:31 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 01:49:31 invisiblethings pkexec[19463]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/lib/update-notifier/package-system-locked]
Mar 14 01:49:59 invisiblethings dbus[741]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.188" (uid=1000 pid=20636 comm="systemadm ") interface="org.freedesktop.systemd1.Manager" member="CreateSnapshot" error name="(unset)" requested_reply="0" destination="org.freedesktop.systemd1" (uid=0 pid=1 comm="/sbin/init splash ")
Mar 14 01:56:05 invisiblethings systemd-logind[727]: Power key pressed.
Mar 14 01:56:13 invisiblethings polkitd(authority=local): Unregistered Authentication Agent for unix-session:c2 (system bus name :1.60, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8) (disconnected from bus)
Mar 14 01:56:13 invisiblethings systemd-logind[727]: System is powering down.
Mar 14 10:22:02 invisiblethings systemd-logind[1472]: New seat seat0.
Mar 14 10:22:02 invisiblethings systemd-logind[1472]: Watching system buttons on /dev/input/event2 (Power Button)
Mar 14 10:22:02 invisiblethings systemd-logind[1472]: Watching system buttons on /dev/input/event3 (Video Bus)
Mar 14 10:22:02 invisiblethings systemd-logind[1472]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 14 10:22:02 invisiblethings systemd-logind[1472]: Watching system buttons on /dev/input/event1 (Sleep Button)
Mar 14 10:22:12 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 14 10:22:12 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 14 10:22:12 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 14 10:22:12 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 14 10:22:12 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)
Mar 14 10:22:12 invisiblethings systemd-logind[1472]: New session c1 of user lightdm.
Mar 14 10:22:12 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0)
Mar 14 10:22:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Mar 14 10:22:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet.so
Mar 14 10:22:17 invisiblethings lightdm: PAM unable to dlopen(pam_kwallet5.so): /lib/security/pam_kwallet5.so: cannot open shared object file: No such file or directory
Mar 14 10:22:17 invisiblethings lightdm: PAM adding faulty module: pam_kwallet5.so
Mar 14 10:22:17 invisiblethings lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "adminroot"
Mar 14 10:22:26 invisiblethings lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm
Mar 14 10:22:26 invisiblethings lightdm: pam_unix(lightdm:session): session opened for user adminroot by (uid=0)
Mar 14 10:22:26 invisiblethings systemd: pam_unix(systemd-user:session): session opened for user adminroot by (uid=0)
Mar 14 10:22:27 invisiblethings systemd-logind[1472]: New session c2 of user adminroot.
Mar 14 10:22:35 invisiblethings gnome-keyring-daemon[2005]: The PKCS#11 component was already initialized
Mar 14 10:22:36 invisiblethings gnome-keyring-daemon[2005]: The SSH agent was already initialized
Mar 14 10:22:36 invisiblethings gnome-keyring-daemon[2005]: The Secret Service was already initialized
Mar 14 10:22:38 invisiblethings polkitd(authority=local): Registered Authentication Agent for unix-session:c2 (system bus name :1.60 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale de_DE.UTF-8)
Mar 14 10:22:43 invisiblethings dbus[1488]: [system] Failed to activate service 'org.bluez': timed out
Mar 14 10:22:46 invisiblethings dbus[1488]: [system] Rejected send message, 10 matched rules; type="method_return", sender=":1.76" (uid=0 pid=2514 comm="/usr/sbin/dnsmasq --no-resolv --keep-in-foreground") interface="(unset)" member="(unset)" error name="(unset)" requested_reply="0" destination=":1.4" (uid=0 pid=1482 comm="/usr/sbin/NetworkManager --no-daemon ")
Mar 14 10:23:13 invisiblethings polkit-agent-helper-1[2484]: pam_ecryptfs: pam_sm_authenticate: /home/adminroot is already mounted
Mar 14 10:23:13 invisiblethings polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:adminroot to gain ONE-SHOT authorization for action com.ubuntu.pkexec.gufw for unix-process:2343:12634 [/bin/sh /usr/bin/gufw] (owned by unix-user:adminroot)
Mar 14 10:23:13 invisiblethings pkexec: pam_unix(polkit-1:session): session opened for user root by (uid=1000)
Mar 14 10:23:13 invisiblethings pkexec: pam_systemd(polkit-1:session): Cannot create session: Already running in a session
Mar 14 10:23:13 invisiblethings pkexec[2355]: adminroot: Executing command [USER=root] [TTY=unknown] [CWD=/home/adminroot] [COMMAND=/usr/bin/gufw-pkexec adminroot]
Mar 14 10:24:12 invisiblethings systemd-logind[1472]: Removed session c1.
Mar 14 10:24:12 invisiblethings systemd: pam_unix(systemd-user:session): session closed for user lightdm
Mar 14 10:26:35 invisiblethings sudo: adminroot : TTY=pts/6 ; PWD=/home/adminroot ; USER=root ; COMMAND=/usr/bin/nautilus
Mar 14 10:26:35 invisiblethings sudo: pam_unix(sudo:session): session opened for user root by adminroot(uid=0)
|
|
14.03.2016, 11:04
| #8 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Kern.log Teil 1 (den UFW Teil habe ich raus gelassen) Code:
ATTFilter Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuset
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpu
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuacct
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Linux version 4.2.0-16-generic (buildd@lcy01-07) (gcc version 5.2.1 20151003 (Ubuntu 5.2.1-21ubuntu2) ) #19-Ubuntu SMP Thu Oct 8 15:35:06 UTC 2015 (Ubuntu 4.2.0-16.19-generic 4.2.3)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-4.2.0-16-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] KERNEL supported cpus:
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Intel GenuineIntel
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] AMD AuthenticAMD
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Centaur CentaurHauls
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers'
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers'
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] x86/fpu: Enabled xstate features 0x3, context size is 0x240 bytes, using 'standard' format.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] x86/fpu: Using 'eager' FPU context switches.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: BIOS-provided physical RAM map:
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000c8b3bfff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b3c000-0x00000000c8b42fff] ACPI NVS
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b43000-0x00000000c9601fff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c9602000-0x00000000c98c2fff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c98c3000-0x00000000dbaf6fff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbaf7000-0x00000000dbb5ffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb60000-0x00000000dbb89fff] ACPI data
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb8a000-0x00000000dbceffff] ACPI NVS
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbcf0000-0x00000000dbffefff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbfff000-0x00000000dbffffff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dd000000-0x00000000df1fffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000f8000000-0x00000000fbffffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed00000-0x00000000fed03fff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000011fdfffff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] NX (Execute Disable) protection: active
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] SMBIOS 2.8 present.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMI: Hewlett-Packard HP 280 G1 MT/2B34, BIOS 80.14 09/28/2015
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0x11fe00 max_arch_pfn = 0x400000000
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] MTRR default type: uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] MTRR fixed ranges enabled:
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 00000-9FFFF write-back
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] A0000-BFFFF uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] C0000-CFFFF write-protect
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] D0000-E7FFF uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] E8000-FFFFF write-protect
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] MTRR variable ranges enabled:
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 0 base 0000000000 mask 7F00000000 write-back
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 1 base 0100000000 mask 7FE0000000 write-back
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 2 base 00E0000000 mask 7FE0000000 uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 3 base 00DE000000 mask 7FFE000000 uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 4 base 00DD000000 mask 7FFF000000 uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 5 base 011FE00000 mask 7FFFE00000 uncachable
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 6 disabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 7 disabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 8 disabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] 9 disabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] original variable MTRRs
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 4GB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 1, base: 4GB, range: 512MB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 2, base: 3584MB, range: 512MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 3, base: 3552MB, range: 32MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 4, base: 3536MB, range: 16MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 5, base: 4606MB, range: 2MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] total RAM covered: 4046M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Found optimal setting for mtrr clean up
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] gran_size: 64K chunk_size: 64M num_reg: 7 lose cover RAM: 0G
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] New variable MTRRs
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 1, base: 2GB, range: 1GB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 2, base: 3GB, range: 512MB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 3, base: 3536MB, range: 16MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 4, base: 3552MB, range: 32MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 5, base: 4GB, range: 512MB, type WB
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] reg 6, base: 4606MB, range: 2MB, type UC
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: update [mem 0xdd000000-0xffffffff] usable ==> reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0xdc000 max_arch_pfn = 0x400000000
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] found SMP MP-table at [mem 0x000fd7c0-0x000fd7cf] mapped at [ffff8800000fd7c0]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Scanning 1 areas for low memory corruption
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Using GB pages for direct mapping
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x00000000-0x000fffff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff0000, 0x01ff0fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff1000, 0x01ff1fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff2000, 0x01ff2fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x11fc00000-0x11fdfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x11fc00000-0x11fdfffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff3000, 0x01ff3fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x100000000-0x11fbfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x100000000-0x11fbfffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc0000000-0xc8b3bfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc0000000-0xc89fffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc8a00000-0xc8b3bfff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff4000, 0x01ff4fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] BRK [0x01ff5000, 0x01ff5fff] PGTABLE
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc8b43000-0xc9601fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc8b43000-0xc8bfffff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc8c00000-0xc95fffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc9600000-0xc9601fff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc98c3000-0xdbaf6fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc98c3000-0xc99fffff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xc9a00000-0xdb9fffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xdba00000-0xdbaf6fff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xdbfff000-0xdbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0xdbfff000-0xdbffffff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00100000-0xbfffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x00100000-0x001fffff] page 4k
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x00200000-0x3fffffff] page 2M
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [mem 0x40000000-0xbfffffff] page 1G
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] RAMDISK: [mem 0x33ba6000-0x35dcafff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: Early table checksum verification disabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: RSDP 0x00000000000F0490 000024 (v02 HPQOEM)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: XSDT 0x00000000DBB69088 000094 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: FACP 0x00000000DBB81FA0 00010C (v05 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: DSDT 0x00000000DBB691B0 018DEC (v02 HPQOEM SLIC-CPC 00008014 INTL 20120711)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: FACS 0x00000000DBCEFF80 000040
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: APIC 0x00000000DBB820B0 000062 (v03 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: FPDT 0x00000000DBB82118 000044 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: FIDT 0x00000000DBB82160 00009C (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: TCPA 0x00000000DBB82200 000032 (v02 HPQOEM SLIC-CPC 00000001 MSFT 01000013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82238 000C7D (v02 HPQOEM SLIC-CPC 00001000 INTL 20120711)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82EB8 000539 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB833F8 000B74 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: MCFG 0x00000000DBB83F70 00003C (v01 HPQOEM SLIC-CPC 01072009 MSFT 00000097)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: HPET 0x00000000DBB83FB0 000038 (v01 HPQOEM SLIC-CPC 01072009 AMI. 00000005)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB83FE8 00036D (v01 HPQOEM SLIC-CPC 00001000 INTL 20120711)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB84358 005722 (v02 HPQOEM SLIC-CPC 00003000 INTL 20120711)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: UEFI 0x00000000DBB89A80 000042 (v01 HPQOEM SLIC-CPC 01072009 00000000)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: DBGP 0x00000000DBB89AC8 000034 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: Local APIC address 0xfee00000
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] No NUMA configuration found
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000011fdfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] NODE_DATA(0) allocated [mem 0x11fdf7000-0x11fdfbfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] [ffffea0000000000-ffffea00047fffff] PMD -> [ffff88011b400000-ffff88011f3fffff] on node 0
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Zone ranges:
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Normal [mem 0x0000000100000000-0x000000011fdfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Movable zone start for each node
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Early memory node ranges
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009cfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000c8b3bfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000c8b43000-0x00000000c9601fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000c98c3000-0x00000000dbaf6fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000dbfff000-0x00000000dbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000100000000-0x000000011fdfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000011fdfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] On node 0 totalpages: 1029580
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA zone: 64 pages used for memmap
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA zone: 21 pages reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA zone: 3996 pages, LIFO batch:0
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA32 zone: 13985 pages used for memmap
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] DMA32 zone: 895024 pages, LIFO batch:31
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Normal zone: 2040 pages used for memmap
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Normal zone: 130560 pages, LIFO batch:31
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Reserving Intel graphics stolen memory at 0xdd200000-0xdf1fffff
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: PM-Timer IO Port: 0x1808
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: Local APIC address 0xfee00000
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] IOAPIC[0]: apic_id 8, version 32, address 0xfec00000, GSI 0-23
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: IRQ0 used by override.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: IRQ9 used by override.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Using ACPI (MADT) for SMP configuration information
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] ACPI: HPET id: 0x8086a701 base: 0xfed00000
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000dffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x000e0000-0x000fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xc8b3c000-0xc8b42fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xc9602000-0xc98c2fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbaf7000-0xdbb5ffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbb60000-0xdbb89fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbb8a000-0xdbceffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbcf0000-0xdbffefff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdc000000-0xdcffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdd000000-0xdf1fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdf200000-0xf7ffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xf8000000-0xfbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfc000000-0xfebfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfec00000-0xfec00fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfec01000-0xfecfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed00000-0xfed03fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed04000-0xfed1bfff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed20000-0xfedfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfee00000-0xfee00fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfee01000-0xfeffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xff000000-0xffffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] e820: [mem 0xdf200000-0xf7ffffff] available for PCI devices
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Booting paravirtualized kernel on bare hardware
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:2 nr_node_ids:1
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PERCPU: Embedded 33 pages/cpu @ffff88011fa00000 s96728 r8192 d30248 u1048576
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] pcpu-alloc: s96728 r8192 d30248 u1048576 alloc=1*2097152
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] pcpu-alloc: [0] 0 1
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1013470
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Policy zone: Normal
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-4.2.0-16-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing!
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Memory: 3934788K/4118320K available (8146K kernel code, 1237K rwdata, 3800K rodata, 1460K init, 1292K bss, 183532K reserved, 0K cma-reserved)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Hierarchical RCU implementation.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Build-time adjustment of leaf fanout to 64.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=2.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] NR_IRQS:16640 nr_irqs:440 16
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Offload RCU callbacks from all CPUs
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Offload RCU callbacks from CPUs: 0-1.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] spurious 8259A interrupt: IRQ7.
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] vt handoff: transparent VT on vt#7
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] Console: colour dummy device 80x25
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] console [tty0] enabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] hpet clockevent registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] tsc: Fast TSC calibration using PIT
Mar 13 02:14:35 invisiblethings kernel: [ 0.000000] tsc: Detected 3192.678 MHz processor
Mar 13 02:14:35 invisiblethings kernel: [ 0.000022] Calibrating delay loop (skipped), value calculated using timer frequency.. 6385.35 BogoMIPS (lpj=12770712)
Mar 13 02:14:35 invisiblethings kernel: [ 0.000024] pid_max: default: 32768 minimum: 301
Mar 13 02:14:35 invisiblethings kernel: [ 0.000028] ACPI: Core revision 20150619
Mar 13 02:14:35 invisiblethings kernel: [ 0.014999] ACPI: All ACPI Tables successfully acquired
Mar 13 02:14:35 invisiblethings kernel: [ 0.015014] Security Framework initialized
Mar 13 02:14:35 invisiblethings kernel: [ 0.015022] AppArmor: AppArmor initialized
Mar 13 02:14:35 invisiblethings kernel: [ 0.015023] Yama: becoming mindful.
Mar 13 02:14:35 invisiblethings kernel: [ 0.015223] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.016258] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.016782] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.016787] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.016970] Initializing cgroup subsys blkio
Mar 13 02:14:35 invisiblethings kernel: [ 0.016973] Initializing cgroup subsys memory
Mar 13 02:14:35 invisiblethings kernel: [ 0.016978] Initializing cgroup subsys devices
Mar 13 02:14:35 invisiblethings kernel: [ 0.016980] Initializing cgroup subsys freezer
Mar 13 02:14:35 invisiblethings kernel: [ 0.016981] Initializing cgroup subsys net_cls
Mar 13 02:14:35 invisiblethings kernel: [ 0.016983] Initializing cgroup subsys perf_event
Mar 13 02:14:35 invisiblethings kernel: [ 0.016984] Initializing cgroup subsys net_prio
Mar 13 02:14:35 invisiblethings kernel: [ 0.016986] Initializing cgroup subsys hugetlb
Mar 13 02:14:35 invisiblethings kernel: [ 0.017005] CPU: Physical Processor ID: 0
Mar 13 02:14:35 invisiblethings kernel: [ 0.017005] CPU: Processor Core ID: 0
Mar 13 02:14:35 invisiblethings kernel: [ 0.017009] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
Mar 13 02:14:35 invisiblethings kernel: [ 0.017009] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)
Mar 13 02:14:35 invisiblethings kernel: [ 0.017766] mce: CPU supports 7 MCE banks
Mar 13 02:14:35 invisiblethings kernel: [ 0.017776] CPU0: Thermal monitoring enabled (TM1)
Mar 13 02:14:35 invisiblethings kernel: [ 0.017783] process: using mwait in idle threads
Mar 13 02:14:35 invisiblethings kernel: [ 0.017785] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024
Mar 13 02:14:35 invisiblethings kernel: [ 0.017786] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4
Mar 13 02:14:35 invisiblethings kernel: [ 0.017883] Freeing SMP alternatives memory: 28K (ffffffff81ea4000 - ffffffff81eab000)
Mar 13 02:14:35 invisiblethings kernel: [ 0.019362] ftrace: allocating 30905 entries in 121 pages
Mar 13 02:14:35 invisiblethings kernel: [ 0.029851] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=0 pin2=0
Mar 13 02:14:35 invisiblethings kernel: [ 0.069572] TSC deadline timer enabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.069575] smpboot: CPU0: Intel(R) Pentium(R) CPU G3250 @ 3.20GHz (fam: 06, model: 3c, stepping: 03)
Mar 13 02:14:35 invisiblethings kernel: [ 0.069596] Performance Events: PEBS fmt2+, 16-deep LBR, Haswell events, full-width counters, Intel PMU driver.
Mar 13 02:14:35 invisiblethings kernel: [ 0.069612] ... version: 3
Mar 13 02:14:35 invisiblethings kernel: [ 0.069613] ... bit width: 48
Mar 13 02:14:35 invisiblethings kernel: [ 0.069613] ... generic registers: 8
Mar 13 02:14:35 invisiblethings kernel: [ 0.069614] ... value mask: 0000ffffffffffff
Mar 13 02:14:35 invisiblethings kernel: [ 0.069615] ... max period: 0000ffffffffffff
Mar 13 02:14:35 invisiblethings kernel: [ 0.069615] ... fixed-purpose events: 3
Mar 13 02:14:35 invisiblethings kernel: [ 0.069616] ... event mask: 00000007000000ff
Mar 13 02:14:35 invisiblethings kernel: [ 0.070200] x86: Booting SMP configuration:
Mar 13 02:14:35 invisiblethings kernel: [ 0.070201] .... node #0, CPUs: #1
Mar 13 02:14:35 invisiblethings kernel: [ 0.074235] x86: Booted up 1 node, 2 CPUs
Mar 13 02:14:35 invisiblethings kernel: [ 0.074238] smpboot: Total of 2 processors activated (12770.71 BogoMIPS)
Mar 13 02:14:35 invisiblethings kernel: [ 0.074264] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
Mar 13 02:14:35 invisiblethings kernel: [ 0.075627] devtmpfs: initialized
Mar 13 02:14:35 invisiblethings kernel: [ 0.076962] evm: security.selinux
Mar 13 02:14:35 invisiblethings kernel: [ 0.076963] evm: security.SMACK64
Mar 13 02:14:35 invisiblethings kernel: [ 0.076963] evm: security.SMACK64EXEC
Mar 13 02:14:35 invisiblethings kernel: [ 0.076964] evm: security.SMACK64TRANSMUTE
Mar 13 02:14:35 invisiblethings kernel: [ 0.076964] evm: security.SMACK64MMAP
Mar 13 02:14:35 invisiblethings kernel: [ 0.076965] evm: security.ima
Mar 13 02:14:35 invisiblethings kernel: [ 0.076965] evm: security.capability
Mar 13 02:14:35 invisiblethings kernel: [ 0.077004] PM: Registering ACPI NVS region [mem 0xc8b3c000-0xc8b42fff] (28672 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.077005] PM: Registering ACPI NVS region [mem 0xdbb8a000-0xdbceffff] (1466368 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.077064] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
Mar 13 02:14:35 invisiblethings kernel: [ 0.077115] pinctrl core: initialized pinctrl subsystem
Mar 13 02:14:35 invisiblethings kernel: [ 0.077199] RTC time: 1:13:57, date: 03/13/16
Mar 13 02:14:35 invisiblethings kernel: [ 0.077279] NET: Registered protocol family 16
Mar 13 02:14:35 invisiblethings kernel: [ 0.086260] cpuidle: using governor ladder
Mar 13 02:14:35 invisiblethings kernel: [ 0.094271] cpuidle: using governor menu
Mar 13 02:14:35 invisiblethings kernel: [ 0.094316] ACPI FADT declares the system doesn't support PCIe ASPM, so disable it
Mar 13 02:14:35 invisiblethings kernel: [ 0.094317] ACPI: bus type PCI registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.094318] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
Mar 13 02:14:35 invisiblethings kernel: [ 0.094362] PCI: MMCONFIG for domain 0000 [bus 00-3f] at [mem 0xf8000000-0xfbffffff] (base 0xf8000000)
Mar 13 02:14:35 invisiblethings kernel: [ 0.094363] PCI: MMCONFIG at [mem 0xf8000000-0xfbffffff] reserved in E820
Mar 13 02:14:35 invisiblethings kernel: [ 0.094370] PCI: Using configuration type 1 for base access
Mar 13 02:14:35 invisiblethings kernel: [ 0.094502] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
Mar 13 02:14:35 invisiblethings kernel: [ 0.094509] perf_event_intel: PMU erratum BJ122, BV98, HSD29 workaround disabled, HT off
Mar 13 02:14:35 invisiblethings kernel: [ 0.102497] ACPI: Added _OSI(Module Device)
Mar 13 02:14:35 invisiblethings kernel: [ 0.102498] ACPI: Added _OSI(Processor Device)
Mar 13 02:14:35 invisiblethings kernel: [ 0.102499] ACPI: Added _OSI(3.0 _SCP Extensions)
Mar 13 02:14:35 invisiblethings kernel: [ 0.102500] ACPI: Added _OSI(Processor Aggregator Device)
Mar 13 02:14:35 invisiblethings kernel: [ 0.105968] ACPI: Executed 6 blocks of module-level executable AML code
Mar 13 02:14:35 invisiblethings kernel: [ 0.110077] ACPI: Dynamic OEM Table Load:
Mar 13 02:14:35 invisiblethings kernel: [ 0.110082] ACPI: SSDT 0xFFFF88011A5B5400 0003D3 (v02 HPQOEM SLIC-CPC 00003001 INTL 20051117)
Mar 13 02:14:35 invisiblethings kernel: [ 0.110640] ACPI: Dynamic OEM Table Load:
Mar 13 02:14:35 invisiblethings kernel: [ 0.110644] ACPI: SSDT 0xFFFF88011B016800 0005AA (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 02:14:35 invisiblethings kernel: [ 0.111233] ACPI: Dynamic OEM Table Load:
Mar 13 02:14:35 invisiblethings kernel: [ 0.111236] ACPI: SSDT 0xFFFF88011A5D7000 000119 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 02:14:35 invisiblethings kernel: [ 0.111872] ACPI: Interpreter enabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.111879] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580)
Mar 13 02:14:35 invisiblethings kernel: [ 0.111885] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580)
Mar 13 02:14:35 invisiblethings kernel: [ 0.111903] ACPI: (supports S0 S3 S4 S5)
Mar 13 02:14:35 invisiblethings kernel: [ 0.111904] ACPI: Using IOAPIC for interrupt routing
Mar 13 02:14:35 invisiblethings kernel: [ 0.111926] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
Mar 13 02:14:35 invisiblethings kernel: [ 0.112275] ACPI: Power Resource [PG00] (on)
Mar 13 02:14:35 invisiblethings kernel: [ 0.112487] ACPI: Power Resource [PG01] (on)
Mar 13 02:14:35 invisiblethings kernel: [ 0.112695] ACPI: Power Resource [PG02] (on)
Mar 13 02:14:35 invisiblethings kernel: [ 0.115226] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.115415] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.115605] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.115809] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.115992] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.116179] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.116364] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.116549] ACPI: Power Resource [WRST] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.118834] ACPI: Power Resource [FN00] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.118890] ACPI: Power Resource [FN01] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.118943] ACPI: Power Resource [FN02] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.118998] ACPI: Power Resource [FN03] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.119052] ACPI: Power Resource [FN04] (off)
Mar 13 02:14:35 invisiblethings kernel: [ 0.119678] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-3e])
Mar 13 02:14:35 invisiblethings kernel: [ 0.119683] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120179] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120180] acpi PNP0A08:00: FADT indicates ASPM is unsupported, using BIOS configuration
Mar 13 02:14:35 invisiblethings kernel: [ 0.120339] acpi PNP0A08:00: host bridge window expanded to [mem 0xdf200000-0xfeafffff window]; [mem 0xfe101000-0xfe113fff window] ignored
Mar 13 02:14:35 invisiblethings kernel: [ 0.120475] PCI host bridge to bus 0000:00
Mar 13 02:14:35 invisiblethings kernel: [ 0.120477] pci_bus 0000:00: root bus resource [bus 00-3e]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120479] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120480] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120481] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120483] pci_bus 0000:00: root bus resource [mem 0x000d0000-0x000d3fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120484] pci_bus 0000:00: root bus resource [mem 0x000d4000-0x000d7fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120485] pci_bus 0000:00: root bus resource [mem 0x000d8000-0x000dbfff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120486] pci_bus 0000:00: root bus resource [mem 0x000dc000-0x000dffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120487] pci_bus 0000:00: root bus resource [mem 0x000e0000-0x000e3fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120489] pci_bus 0000:00: root bus resource [mem 0x000e4000-0x000e7fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120490] pci_bus 0000:00: root bus resource [mem 0xdf200000-0xfeafffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120495] pci 0000:00:00.0: [8086:0c00] type 00 class 0x060000
Mar 13 02:14:35 invisiblethings kernel: [ 0.120558] pci 0000:00:01.0: [8086:0c01] type 01 class 0x060400
Mar 13 02:14:35 invisiblethings kernel: [ 0.120582] pci 0000:00:01.0: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.120633] pci 0000:00:01.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.120663] pci 0000:00:02.0: [8086:0402] type 00 class 0x030000
Mar 13 02:14:35 invisiblethings kernel: [ 0.120673] pci 0000:00:02.0: reg 0x10: [mem 0xf7800000-0xf7bfffff 64bit]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120678] pci 0000:00:02.0: reg 0x18: [mem 0xe0000000-0xefffffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120681] pci 0000:00:02.0: reg 0x20: [io 0xf000-0xf03f]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120767] pci 0000:00:14.0: [8086:8c31] type 00 class 0x0c0330
Mar 13 02:14:35 invisiblethings kernel: [ 0.120791] pci 0000:00:14.0: reg 0x10: [mem 0xf7d00000-0xf7d0ffff 64bit]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120834] pci 0000:00:14.0: PME# supported from D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.120867] pci 0000:00:14.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.120896] pci 0000:00:16.0: [8086:8c3a] type 00 class 0x078000
Mar 13 02:14:35 invisiblethings kernel: [ 0.120920] pci 0000:00:16.0: reg 0x10: [mem 0xf7d15000-0xf7d1500f 64bit]
Mar 13 02:14:35 invisiblethings kernel: [ 0.120966] pci 0000:00:16.0: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.121045] pci 0000:00:1a.0: [8086:8c2d] type 00 class 0x0c0320
Mar 13 02:14:35 invisiblethings kernel: [ 0.121070] pci 0000:00:1a.0: reg 0x10: [mem 0xf7d13000-0xf7d133ff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121131] pci 0000:00:1a.0: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.121165] pci 0000:00:1a.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.121194] pci 0000:00:1c.0: [8086:8c10] type 01 class 0x060400
Mar 13 02:14:35 invisiblethings kernel: [ 0.121246] pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.121305] pci 0000:00:1c.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.121334] pci 0000:00:1c.3: [8086:8c16] type 01 class 0x060400
Mar 13 02:14:35 invisiblethings kernel: [ 0.121388] pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.121445] pci 0000:00:1c.3: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.121478] pci 0000:00:1d.0: [8086:8c26] type 00 class 0x0c0320
Mar 13 02:14:35 invisiblethings kernel: [ 0.121503] pci 0000:00:1d.0: reg 0x10: [mem 0xf7d12000-0xf7d123ff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121563] pci 0000:00:1d.0: PME# supported from D0 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.121597] pci 0000:00:1d.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.121626] pci 0000:00:1f.0: [8086:8c5c] type 00 class 0x060100
Mar 13 02:14:35 invisiblethings kernel: [ 0.121760] pci 0000:00:1f.2: [8086:8c02] type 00 class 0x010601
Mar 13 02:14:35 invisiblethings kernel: [ 0.121778] pci 0000:00:1f.2: reg 0x10: [io 0xf0b0-0xf0b7]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121785] pci 0000:00:1f.2: reg 0x14: [io 0xf0a0-0xf0a3]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121792] pci 0000:00:1f.2: reg 0x18: [io 0xf090-0xf097]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121799] pci 0000:00:1f.2: reg 0x1c: [io 0xf080-0xf083]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121805] pci 0000:00:1f.2: reg 0x20: [io 0xf060-0xf07f]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121812] pci 0000:00:1f.2: reg 0x24: [mem 0xf7d11000-0xf7d117ff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121834] pci 0000:00:1f.2: PME# supported from D3hot
Mar 13 02:14:35 invisiblethings kernel: [ 0.121884] pci 0000:00:1f.3: [8086:8c22] type 00 class 0x0c0500
Mar 13 02:14:35 invisiblethings kernel: [ 0.121899] pci 0000:00:1f.3: reg 0x10: [mem 0xf7d10000-0xf7d100ff 64bit]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121917] pci 0000:00:1f.3: reg 0x20: [io 0xf040-0xf05f]
Mar 13 02:14:35 invisiblethings kernel: [ 0.121999] pci 0000:00:01.0: PCI bridge to [bus 01]
Mar 13 02:14:35 invisiblethings kernel: [ 0.122047] pci 0000:00:1c.0: PCI bridge to [bus 02]
Mar 13 02:14:35 invisiblethings kernel: [ 0.122112] pci 0000:03:00.0: [10ec:8168] type 00 class 0x020000
Mar 13 02:14:35 invisiblethings kernel: [ 0.122150] pci 0000:03:00.0: reg 0x10: [io 0xe000-0xe0ff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.122177] pci 0000:03:00.0: reg 0x18: [mem 0xf7c00000-0xf7c00fff 64bit]
Mar 13 02:14:35 invisiblethings kernel: [ 0.122194] pci 0000:03:00.0: reg 0x20: [mem 0xf0000000-0xf0003fff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.122251] pci 0000:03:00.0: supports D1 D2
Mar 13 02:14:35 invisiblethings kernel: [ 0.122252] pci 0000:03:00.0: PME# supported from D0 D1 D2 D3hot D3cold
Mar 13 02:14:35 invisiblethings kernel: [ 0.122300] pci 0000:03:00.0: System wakeup disabled by ACPI
Mar 13 02:14:35 invisiblethings kernel: [ 0.130349] pci 0000:00:1c.3: PCI bridge to [bus 03]
Mar 13 02:14:35 invisiblethings kernel: [ 0.130353] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.130356] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.130360] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.131010] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 10 *11 12 14 15)
Mar 13 02:14:35 invisiblethings kernel: [ 0.131045] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 02:14:35 invisiblethings kernel: [ 0.131079] ACPI: PCI Interrupt Link [LNKC] (IRQs *3 4 5 6 10 11 12 14 15)
Mar 13 02:14:35 invisiblethings kernel: [ 0.131112] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 5 6 *10 11 12 14 15)
Mar 13 02:14:35 invisiblethings kernel: [ 0.131144] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 02:14:35 invisiblethings kernel: [ 0.131176] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 02:14:35 invisiblethings kernel: [ 0.131208] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 02:14:35 invisiblethings kernel: [ 0.131240] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 *5 6 10 11 12 14 15)
Mar 13 02:14:35 invisiblethings kernel: [ 0.131449] ACPI: Enabled 6 GPEs in block 00 to 3F
Mar 13 02:14:35 invisiblethings kernel: [ 0.131530] vgaarb: setting as boot device: PCI:0000:00:02.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.131532] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
Mar 13 02:14:35 invisiblethings kernel: [ 0.131533] vgaarb: loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.131534] vgaarb: bridge control possible 0000:00:02.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.131711] SCSI subsystem initialized
Mar 13 02:14:35 invisiblethings kernel: [ 0.131742] libata version 3.00 loaded.
Mar 13 02:14:35 invisiblethings kernel: [ 0.131757] ACPI: bus type USB registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.131770] usbcore: registered new interface driver usbfs
Mar 13 02:14:35 invisiblethings kernel: [ 0.131776] usbcore: registered new interface driver hub
Mar 13 02:14:35 invisiblethings kernel: [ 0.131782] usbcore: registered new device driver usb
Mar 13 02:14:35 invisiblethings kernel: [ 0.131874] PCI: Using ACPI for IRQ routing
Mar 13 02:14:35 invisiblethings kernel: [ 0.133113] PCI: pci_cache_line_size set to 64 bytes
Mar 13 02:14:35 invisiblethings kernel: [ 0.133142] e820: reserve RAM buffer [mem 0x0009d800-0x0009ffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.133143] e820: reserve RAM buffer [mem 0xc8b3c000-0xcbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.133144] e820: reserve RAM buffer [mem 0xc9602000-0xcbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.133145] e820: reserve RAM buffer [mem 0xdbaf7000-0xdbffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.133146] e820: reserve RAM buffer [mem 0x11fe00000-0x11fffffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.133222] NetLabel: Initializing
Mar 13 02:14:35 invisiblethings kernel: [ 0.133223] NetLabel: domain hash size = 128
Mar 13 02:14:35 invisiblethings kernel: [ 0.133224] NetLabel: protocols = UNLABELED CIPSOv4
Mar 13 02:14:35 invisiblethings kernel: [ 0.133233] NetLabel: unlabeled traffic allowed by default
Mar 13 02:14:35 invisiblethings kernel: [ 0.133283] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0
Mar 13 02:14:35 invisiblethings kernel: [ 0.133287] hpet0: 8 comparators, 64-bit 14.318180 MHz counter
Mar 13 02:14:35 invisiblethings kernel: [ 0.135309] clocksource: Switched to clocksource hpet
Mar 13 02:14:35 invisiblethings kernel: [ 0.140133] AppArmor: AppArmor Filesystem Enabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.140193] pnp: PnP ACPI init
Mar 13 02:14:35 invisiblethings kernel: [ 0.140364] system 00:00: [io 0x0800-0x087f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140367] system 00:00: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140386] pnp 00:01: Plug and Play ACPI device, IDs PNP0b00 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140410] system 00:02: [io 0x1854-0x1857] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140412] system 00:02: Plug and Play ACPI device, IDs INT3f0d PNP0c02 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140549] system 00:03: [io 0x0a00-0x0a1f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140550] system 00:03: [io 0x0a20-0x0a2f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140551] system 00:03: [io 0x0a30-0x0a3f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140552] system 00:03: [io 0x0a40-0x0a7f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140553] system 00:03: [io 0x0a50-0x0a5f] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140555] system 00:03: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140602] system 00:04: [io 0x04d0-0x04d1] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140604] system 00:04: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140732] pnp 00:05: Plug and Play ACPI device, IDs PNP0c31 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.140932] system 00:06: [mem 0xfed1c000-0xfed1ffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140934] system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140935] system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140936] system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140937] system 00:06: [mem 0xf8000000-0xfbffffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140938] system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140939] system 00:06: [mem 0xfed90000-0xfed93fff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140940] system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140941] system 00:06: [mem 0xff000000-0xffffffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140943] system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140944] system 00:06: [mem 0xf7fe0000-0xf7feffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140945] system 00:06: [mem 0xf7ff0000-0xf7ffffff] has been reserved
Mar 13 02:14:35 invisiblethings kernel: [ 0.140947] system 00:06: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 02:14:35 invisiblethings kernel: [ 0.141075] pnp: PnP ACPI: found 7 devices
Mar 13 02:14:35 invisiblethings kernel: [ 0.146827] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
Mar 13 02:14:35 invisiblethings kernel: [ 0.146843] pci 0000:00:1c.0: bridge window [io 0x1000-0x0fff] to [bus 02] add_size 1000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146845] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 02] add_size 200000 add_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146846] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff] to [bus 02] add_size 200000 add_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146854] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x000fffff] res_to_dev_res add_size 200000 min_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146855] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x002fffff] res_to_dev_res add_size 200000 min_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146857] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146858] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x002fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146859] pci 0000:00:1c.0: res[13]=[io 0x1000-0x0fff] res_to_dev_res add_size 1000 min_align 1000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146860] pci 0000:00:1c.0: res[13]=[io 0x1000-0x1fff] res_to_dev_res add_size 1000 min_align 1000
Mar 13 02:14:35 invisiblethings kernel: [ 0.146864] pci 0000:00:1c.0: BAR 14: assigned [mem 0xdf200000-0xdf3fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146869] pci 0000:00:1c.0: BAR 15: assigned [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146871] pci 0000:00:1c.0: BAR 13: assigned [io 0x2000-0x2fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146872] pci 0000:00:01.0: PCI bridge to [bus 01]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146877] pci 0000:00:1c.0: PCI bridge to [bus 02]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146879] pci 0000:00:1c.0: bridge window [io 0x2000-0x2fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146884] pci 0000:00:1c.0: bridge window [mem 0xdf200000-0xdf3fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146887] pci 0000:00:1c.0: bridge window [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146892] pci 0000:00:1c.3: PCI bridge to [bus 03]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146894] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146898] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146902] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146907] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146908] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146909] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146910] pci_bus 0000:00: resource 7 [mem 0x000d0000-0x000d3fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146911] pci_bus 0000:00: resource 8 [mem 0x000d4000-0x000d7fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146912] pci_bus 0000:00: resource 9 [mem 0x000d8000-0x000dbfff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146913] pci_bus 0000:00: resource 10 [mem 0x000dc000-0x000dffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146914] pci_bus 0000:00: resource 11 [mem 0x000e0000-0x000e3fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146915] pci_bus 0000:00: resource 12 [mem 0x000e4000-0x000e7fff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146916] pci_bus 0000:00: resource 13 [mem 0xdf200000-0xfeafffff window]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146917] pci_bus 0000:02: resource 0 [io 0x2000-0x2fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146918] pci_bus 0000:02: resource 1 [mem 0xdf200000-0xdf3fffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146919] pci_bus 0000:02: resource 2 [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146920] pci_bus 0000:03: resource 0 [io 0xe000-0xefff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146921] pci_bus 0000:03: resource 1 [mem 0xf7c00000-0xf7cfffff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146922] pci_bus 0000:03: resource 2 [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 02:14:35 invisiblethings kernel: [ 0.146944] NET: Registered protocol family 2
Mar 13 02:14:35 invisiblethings kernel: [ 0.147057] TCP established hash table entries: 32768 (order: 6, 262144 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.147134] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.147251] TCP: Hash tables configured (established 32768 bind 32768)
Mar 13 02:14:35 invisiblethings kernel: [ 0.147273] UDP hash table entries: 2048 (order: 4, 65536 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.147289] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.147334] NET: Registered protocol family 1
Mar 13 02:14:35 invisiblethings kernel: [ 0.147345] pci 0000:00:02.0: Video device with shadowed ROM
Mar 13 02:14:35 invisiblethings kernel: [ 0.187427] PCI: CLS 64 bytes, default 64
Mar 13 02:14:35 invisiblethings kernel: [ 0.187471] Trying to unpack rootfs image as initramfs...
Mar 13 02:14:35 invisiblethings kernel: [ 0.572693] Freeing initrd memory: 34964K (ffff880033ba6000 - ffff880035dcb000)
Mar 13 02:14:35 invisiblethings kernel: [ 0.572705] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Mar 13 02:14:35 invisiblethings kernel: [ 0.572706] software IO TLB [mem 0xd7af7000-0xdbaf7000] (64MB) mapped at [ffff8800d7af7000-ffff8800dbaf6fff]
Mar 13 02:14:35 invisiblethings kernel: [ 0.572771] RAPL PMU detected, API unit is 2^-32 Joules, 4 fixed counters 655360 ms ovfl timer
Mar 13 02:14:35 invisiblethings kernel: [ 0.572772] hw unit of domain pp0-core 2^-14 Joules
Mar 13 02:14:35 invisiblethings kernel: [ 0.572772] hw unit of domain package 2^-14 Joules
Mar 13 02:14:35 invisiblethings kernel: [ 0.572773] hw unit of domain dram 2^-14 Joules
Mar 13 02:14:35 invisiblethings kernel: [ 0.572773] hw unit of domain pp1-gpu 2^-14 Joules
Mar 13 02:14:35 invisiblethings kernel: [ 0.572870] microcode: CPU0 sig=0x306c3, pf=0x2, revision=0x1d
Mar 13 02:14:35 invisiblethings kernel: [ 0.572873] microcode: CPU1 sig=0x306c3, pf=0x2, revision=0x1d
Mar 13 02:14:35 invisiblethings kernel: [ 0.572920] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
Mar 13 02:14:35 invisiblethings kernel: [ 0.572974] Scanning for low memory corruption every 60 seconds
Mar 13 02:14:35 invisiblethings kernel: [ 0.573199] futex hash table entries: 512 (order: 3, 32768 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.573214] Initialise system trusted keyring
Mar 13 02:14:35 invisiblethings kernel: [ 0.573231] audit: initializing netlink subsys (disabled)
Mar 13 02:14:35 invisiblethings kernel: [ 0.573244] audit: type=2000 audit(1457831637.572:1): initialized
Mar 13 02:14:35 invisiblethings kernel: [ 0.573485] HugeTLB registered 1 GB page size, pre-allocated 0 pages
Mar 13 02:14:35 invisiblethings kernel: [ 0.573486] HugeTLB registered 2 MB page size, pre-allocated 0 pages
Mar 13 02:14:35 invisiblethings kernel: [ 0.574476] zpool: loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.574479] zbud: loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.574607] VFS: Disk quotas dquot_6.6.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.574630] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
Mar 13 02:14:35 invisiblethings kernel: [ 0.574942] fuse init (API version 7.23)
Mar 13 02:14:35 invisiblethings kernel: [ 0.575036] Key type big_key registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.575291] Key type asymmetric registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.575294] Asymmetric key parser 'x509' registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.575304] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
Mar 13 02:14:35 invisiblethings kernel: [ 0.575323] io scheduler noop registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.575325] io scheduler deadline registered (default)
Mar 13 02:14:35 invisiblethings kernel: [ 0.575345] io scheduler cfq registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.575750] pcieport 0000:00:01.0: Signaling PME through PCIe PME interrupt
Mar 13 02:14:35 invisiblethings kernel: [ 0.575752] pcie_pme 0000:00:01.0:pcie01: service driver pcie_pme loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.575767] pcieport 0000:00:1c.0: Signaling PME through PCIe PME interrupt
Mar 13 02:14:35 invisiblethings kernel: [ 0.575770] pcie_pme 0000:00:1c.0:pcie01: service driver pcie_pme loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.575784] pcieport 0000:00:1c.3: Signaling PME through PCIe PME interrupt
Mar 13 02:14:35 invisiblethings kernel: [ 0.575785] pci 0000:03:00.0: Signaling PME through PCIe PME interrupt
Mar 13 02:14:35 invisiblethings kernel: [ 0.575789] pcie_pme 0000:00:1c.3:pcie01: service driver pcie_pme loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.575793] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Mar 13 02:14:35 invisiblethings kernel: [ 0.575801] pciehp 0000:00:1c.0:pcie04: Slot #0 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ LLActRep+
Mar 13 02:14:35 invisiblethings kernel: [ 0.575817] pciehp 0000:00:1c.0:pcie04: service driver pciehp loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.575820] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
Mar 13 02:14:35 invisiblethings kernel: [ 0.575841] vesafb: mode is 1920x1080x32, linelength=7680, pages=0
Mar 13 02:14:35 invisiblethings kernel: [ 0.575842] vesafb: scrolling: redraw
Mar 13 02:14:35 invisiblethings kernel: [ 0.575843] vesafb: Truecolor: size=8:8:8:8, shift=24:16:8:0
Mar 13 02:14:35 invisiblethings kernel: [ 0.575851] vesafb: framebuffer at 0xe0000000, mapped to 0xffffc90000800000, using 8128k, total 8128k
Mar 13 02:14:35 invisiblethings kernel: [ 0.575922] Console: switching to colour frame buffer device 240x67
Mar 13 02:14:35 invisiblethings kernel: [ 0.575938] fb0: VESA VGA frame buffer device
Mar 13 02:14:35 invisiblethings kernel: [ 0.575949] intel_idle: MWAIT substates: 0x2120
Mar 13 02:14:35 invisiblethings kernel: [ 0.575950] intel_idle: v0.4 model 0x3C
Mar 13 02:14:35 invisiblethings kernel: [ 0.575951] intel_idle: lapic_timer_reliable_states 0xffffffff
Mar 13 02:14:35 invisiblethings kernel: [ 0.576062] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
Mar 13 02:14:35 invisiblethings kernel: [ 0.576065] ACPI: Power Button [PWRB]
Mar 13 02:14:35 invisiblethings kernel: [ 0.576088] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1
Mar 13 02:14:35 invisiblethings kernel: [ 0.576089] ACPI: Sleep Button [SLPB]
Mar 13 02:14:35 invisiblethings kernel: [ 0.576111] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2
Mar 13 02:14:35 invisiblethings kernel: [ 0.576113] ACPI: Power Button [PWRF]
Mar 13 02:14:35 invisiblethings kernel: [ 0.576592] thermal LNXTHERM:00: registered as thermal_zone0
Mar 13 02:14:35 invisiblethings kernel: [ 0.576593] ACPI: Thermal Zone [TZ00] (28 C)
Mar 13 02:14:35 invisiblethings kernel: [ 0.576717] thermal LNXTHERM:01: registered as thermal_zone1
Mar 13 02:14:35 invisiblethings kernel: [ 0.576718] ACPI: Thermal Zone [TZ01] (30 C)
Mar 13 02:14:35 invisiblethings kernel: [ 0.576768] GHES: HEST is not enabled!
Mar 13 02:14:35 invisiblethings kernel: [ 0.576825] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
Mar 13 02:14:35 invisiblethings kernel: [ 0.577912] Linux agpgart interface v0.103
Mar 13 02:14:35 invisiblethings kernel: [ 0.651782] tpm_tis 00:05: 1.2 TPM (device-id 0xB, rev-id 16)
Mar 13 02:14:35 invisiblethings kernel: [ 0.953868] brd: module loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.954399] loop: module loaded
Mar 13 02:14:35 invisiblethings kernel: [ 0.954543] libphy: Fixed MDIO Bus: probed
Mar 13 02:14:35 invisiblethings kernel: [ 0.954545] tun: Universal TUN/TAP device driver, 1.6
Mar 13 02:14:35 invisiblethings kernel: [ 0.954545] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Mar 13 02:14:35 invisiblethings kernel: [ 0.954572] PPP generic driver version 2.4.2
Mar 13 02:14:35 invisiblethings kernel: [ 0.954688] xhci_hcd 0000:00:14.0: xHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.954692] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1
Mar 13 02:14:35 invisiblethings kernel: [ 0.954770] xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x100 quirks 0x00009810
Mar 13 02:14:35 invisiblethings kernel: [ 0.954775] xhci_hcd 0000:00:14.0: cache line size of 64 is not supported
Mar 13 02:14:35 invisiblethings kernel: [ 0.954840] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 02:14:35 invisiblethings kernel: [ 0.954841] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 02:14:35 invisiblethings kernel: [ 0.954842] usb usb1: Product: xHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.954843] usb usb1: Manufacturer: Linux 4.2.0-16-generic xhci-hcd
Mar 13 02:14:35 invisiblethings kernel: [ 0.954844] usb usb1: SerialNumber: 0000:00:14.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.954919] hub 1-0:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 0.954929] hub 1-0:1.0: 10 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 0.956583] xhci_hcd 0000:00:14.0: xHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.956585] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2
Mar 13 02:14:35 invisiblethings kernel: [ 0.956607] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
Mar 13 02:14:35 invisiblethings kernel: [ 0.956608] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 02:14:35 invisiblethings kernel: [ 0.956609] usb usb2: Product: xHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.956610] usb usb2: Manufacturer: Linux 4.2.0-16-generic xhci-hcd
Mar 13 02:14:35 invisiblethings kernel: [ 0.956611] usb usb2: SerialNumber: 0000:00:14.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.956692] hub 2-0:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 0.956697] hub 2-0:1.0: 2 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 0.957100] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.957104] ehci-pci: EHCI PCI platform driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.957164] ehci-pci 0000:00:1a.0: EHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.957167] ehci-pci 0000:00:1a.0: new USB bus registered, assigned bus number 3
Mar 13 02:14:35 invisiblethings kernel: [ 0.957176] ehci-pci 0000:00:1a.0: debug port 2
Mar 13 02:14:35 invisiblethings kernel: [ 0.961074] ehci-pci 0000:00:1a.0: cache line size of 64 is not supported
Mar 13 02:14:35 invisiblethings kernel: [ 0.961081] ehci-pci 0000:00:1a.0: irq 16, io mem 0xf7d13000
Mar 13 02:14:35 invisiblethings kernel: [ 0.976028] ehci-pci 0000:00:1a.0: USB 2.0 started, EHCI 1.00
Mar 13 02:14:35 invisiblethings kernel: [ 0.976059] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 02:14:35 invisiblethings kernel: [ 0.976061] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 02:14:35 invisiblethings kernel: [ 0.976062] usb usb3: Product: EHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.976063] usb usb3: Manufacturer: Linux 4.2.0-16-generic ehci_hcd
Mar 13 02:14:35 invisiblethings kernel: [ 0.976064] usb usb3: SerialNumber: 0000:00:1a.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.976186] hub 3-0:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 0.976191] hub 3-0:1.0: 2 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 0.976327] ehci-pci 0000:00:1d.0: EHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.976331] ehci-pci 0000:00:1d.0: new USB bus registered, assigned bus number 4
Mar 13 02:14:35 invisiblethings kernel: [ 0.976340] ehci-pci 0000:00:1d.0: debug port 2
Mar 13 02:14:35 invisiblethings kernel: [ 0.980224] ehci-pci 0000:00:1d.0: cache line size of 64 is not supported
Mar 13 02:14:35 invisiblethings kernel: [ 0.980229] ehci-pci 0000:00:1d.0: irq 23, io mem 0xf7d12000
Mar 13 02:14:35 invisiblethings kernel: [ 0.992044] ehci-pci 0000:00:1d.0: USB 2.0 started, EHCI 1.00
Mar 13 02:14:35 invisiblethings kernel: [ 0.992072] usb usb4: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 02:14:35 invisiblethings kernel: [ 0.992073] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 02:14:35 invisiblethings kernel: [ 0.992074] usb usb4: Product: EHCI Host Controller
Mar 13 02:14:35 invisiblethings kernel: [ 0.992075] usb usb4: Manufacturer: Linux 4.2.0-16-generic ehci_hcd
Mar 13 02:14:35 invisiblethings kernel: [ 0.992076] usb usb4: SerialNumber: 0000:00:1d.0
Mar 13 02:14:35 invisiblethings kernel: [ 0.992200] hub 4-0:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 0.992204] hub 4-0:1.0: 2 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 0.992283] ehci-platform: EHCI generic platform driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.992291] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.992294] ohci-pci: OHCI PCI platform driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.992300] ohci-platform: OHCI generic platform driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.992306] uhci_hcd: USB Universal Host Controller Interface driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.992336] i8042: PNP: No PS/2 controller found. Probing ports directly.
Mar 13 02:14:35 invisiblethings kernel: [ 0.992753] serio: i8042 KBD port at 0x60,0x64 irq 1
Mar 13 02:14:35 invisiblethings kernel: [ 0.992758] serio: i8042 AUX port at 0x60,0x64 irq 12
Mar 13 02:14:35 invisiblethings kernel: [ 0.992956] mousedev: PS/2 mouse device common for all mice
Mar 13 02:14:35 invisiblethings kernel: [ 0.993236] rtc_cmos 00:01: RTC can wake from S4
Mar 13 02:14:35 invisiblethings kernel: [ 0.993343] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
Mar 13 02:14:35 invisiblethings kernel: [ 0.993367] rtc_cmos 00:01: alarms up to one month, y3k, 242 bytes nvram, hpet irqs
Mar 13 02:14:35 invisiblethings kernel: [ 0.993372] i2c /dev entries driver
Mar 13 02:14:35 invisiblethings kernel: [ 0.993425] device-mapper: uevent: version 1.0.3
Mar 13 02:14:35 invisiblethings kernel: [ 0.993472] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com
Mar 13 02:14:35 invisiblethings kernel: [ 0.993484] Intel P-state driver initializing.
Mar 13 02:14:35 invisiblethings kernel: [ 0.993573] ledtrig-cpu: registered to indicate activity on CPUs
Mar 13 02:14:35 invisiblethings kernel: [ 0.993842] PCCT header not found.
Mar 13 02:14:35 invisiblethings kernel: [ 0.994350] NET: Registered protocol family 10
Mar 13 02:14:35 invisiblethings kernel: [ 0.994745] NET: Registered protocol family 17
Mar 13 02:14:35 invisiblethings kernel: [ 0.994773] Key type dns_resolver registered
Mar 13 02:14:35 invisiblethings kernel: [ 0.995494] Loading compiled-in X.509 certificates
Mar 13 02:14:35 invisiblethings kernel: [ 0.997758] Loaded X.509 cert 'Build time autogenerated kernel key: 6a1c9c21f04ab86fd1d7ced6ca113540fc8e35b6'
Mar 13 02:14:35 invisiblethings kernel: [ 0.997793] registered taskstats version 1
Mar 13 02:14:35 invisiblethings kernel: [ 0.997843] zswap: loading zswap
Mar 13 02:14:35 invisiblethings kernel: [ 0.997848] zswap: using zbud pool
Mar 13 02:14:35 invisiblethings kernel: [ 0.997858] zswap: using lzo compressor
Mar 13 02:14:35 invisiblethings kernel: [ 1.000647] Key type trusted registered
Mar 13 02:14:35 invisiblethings kernel: [ 1.002628] Key type encrypted registered
Mar 13 02:14:35 invisiblethings kernel: [ 1.002634] AppArmor: AppArmor sha1 policy hashing enabled
Mar 13 02:14:35 invisiblethings kernel: [ 1.268267] usb 1-1: new low-speed USB device number 2 using xhci_hcd
Mar 13 02:14:35 invisiblethings kernel: [ 1.288283] usb 3-1: new high-speed USB device number 2 using ehci-pci
Mar 13 02:14:35 invisiblethings kernel: [ 1.304296] usb 4-1: new high-speed USB device number 2 using ehci-pci
Mar 13 02:14:35 invisiblethings kernel: [ 1.401699] usb 1-1: New USB device found, idVendor=0461, idProduct=0010
Mar 13 02:14:35 invisiblethings kernel: [ 1.401701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Mar 13 02:14:35 invisiblethings kernel: [ 1.401703] usb 1-1: Product: USB Keyboard
Mar 13 02:14:35 invisiblethings kernel: [ 1.401704] usb 1-1: Manufacturer: NOVATEK
Mar 13 02:14:35 invisiblethings kernel: [ 1.401821] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 02:14:35 invisiblethings kernel: [ 1.401824] usb 1-1: ep 0x82 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 02:14:35 invisiblethings kernel: [ 1.420772] usb 3-1: New USB device found, idVendor=8087, idProduct=8008
Mar 13 02:14:35 invisiblethings kernel: [ 1.420774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Mar 13 02:14:35 invisiblethings kernel: [ 1.421044] hub 3-1:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 1.421147] hub 3-1:1.0: 4 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 1.436808] usb 4-1: New USB device found, idVendor=8087, idProduct=8000
Mar 13 02:14:35 invisiblethings kernel: [ 1.436810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Mar 13 02:14:35 invisiblethings kernel: [ 1.437088] hub 4-1:1.0: USB hub found
Mar 13 02:14:35 invisiblethings kernel: [ 1.437177] hub 4-1:1.0: 6 ports detected
Mar 13 02:14:35 invisiblethings kernel: [ 1.568504] usb 1-2: new low-speed USB device number 3 using xhci_hcd
Mar 13 02:14:35 invisiblethings kernel: [ 1.572510] tsc: Refined TSC clocksource calibration: 3192.606 MHz
Mar 13 02:14:35 invisiblethings kernel: [ 1.572512] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2e050166e04, max_idle_ns: 440795273449 ns
Mar 13 02:14:35 invisiblethings kernel: [ 1.696703] evm: HMAC attrs: 0x1
Mar 13 02:14:35 invisiblethings kernel: [ 1.697121] Magic number: 8:228:205
Mar 13 02:14:35 invisiblethings kernel: [ 1.697169] acpi device:2d: hash matches
Mar 13 02:14:35 invisiblethings kernel: [ 1.697231] rtc_cmos 00:01: setting system clock to 2016-03-13 01:13:58 UTC (1457831638)
Mar 13 02:14:35 invisiblethings kernel: [ 1.697272] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
Mar 13 02:14:35 invisiblethings kernel: [ 1.697273] EDD information not available.
Mar 13 02:14:35 invisiblethings kernel: [ 1.697330] PM: Hibernation image not present or could not be loaded.
Mar 13 02:14:35 invisiblethings kernel: [ 1.697544] Freeing unused kernel memory: 1460K (ffffffff81d37000 - ffffffff81ea4000)
Mar 13 02:14:35 invisiblethings kernel: [ 1.697545] Write protecting the kernel read-only data: 12288k
Mar 13 02:14:35 invisiblethings kernel: [ 1.697643] Freeing unused kernel memory: 36K (ffff8800017f7000 - ffff880001800000)
Mar 13 02:14:35 invisiblethings kernel: [ 1.697696] Freeing unused kernel memory: 296K (ffff880001bb6000 - ffff880001c00000)
Mar 13 02:14:35 invisiblethings kernel: [ 1.700036] usb 1-2: New USB device found, idVendor=03f0, idProduct=094a
Mar 13 02:14:35 invisiblethings kernel: [ 1.700039] usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Mar 13 02:14:35 invisiblethings kernel: [ 1.700040] usb 1-2: Product: HP USB Optical Mouse
Mar 13 02:14:35 invisiblethings kernel: [ 1.700041] usb 1-2: Manufacturer: PixArt
Mar 13 02:14:35 invisiblethings kernel: [ 1.700107] usb 1-2: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 02:14:35 invisiblethings kernel: [ 1.705336] random: systemd-udevd urandom read with 4 bits of entropy available
Mar 13 02:14:35 invisiblethings kernel: [ 1.738352] [drm] Initialized drm 1.1.0 20060810
Mar 13 02:14:35 invisiblethings kernel: [ 1.738726] ahci 0000:00:1f.2: version 3.0
Mar 13 02:14:35 invisiblethings kernel: [ 1.738874] ahci 0000:00:1f.2: AHCI 0001.0300 32 slots 4 ports 6 Gbps 0x11 impl SATA mode
Mar 13 02:14:35 invisiblethings kernel: [ 1.738876] ahci 0000:00:1f.2: flags: 64bit ncq pm led clo pio slum part ems
Mar 13 02:14:35 invisiblethings kernel: [ 1.753955] wmi: Mapper loaded
Mar 13 02:14:35 invisiblethings kernel: [ 1.754744] scsi host0: ahci
Mar 13 02:14:35 invisiblethings kernel: [ 1.757635] hidraw: raw HID events driver (C) Jiri Kosina
Mar 13 02:14:35 invisiblethings kernel: [ 1.758610] scsi host1: ahci
Mar 13 02:14:35 invisiblethings kernel: [ 1.759896] scsi host2: ahci
Mar 13 02:14:35 invisiblethings kernel: [ 1.759953] scsi host3: ahci
Mar 13 02:14:35 invisiblethings kernel: [ 1.759998] scsi host4: ahci
Mar 13 02:14:35 invisiblethings kernel: [ 1.760028] ata1: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11100 irq 28
Mar 13 02:14:35 invisiblethings kernel: [ 1.760029] ata2: DUMMY
Mar 13 02:14:35 invisiblethings kernel: [ 1.760030] ata3: DUMMY
Mar 13 02:14:35 invisiblethings kernel: [ 1.760030] ata4: DUMMY
Mar 13 02:14:35 invisiblethings kernel: [ 1.760033] ata5: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11300 irq 28
Mar 13 02:14:35 invisiblethings kernel: [ 1.760472] [drm] Memory usable by graphics device = 2048M
Mar 13 02:14:35 invisiblethings kernel: [ 1.760474] checking generic (e0000000 7f0000) vs hw (e0000000 10000000)
Mar 13 02:14:35 invisiblethings kernel: [ 1.760475] fb: switching to inteldrmfb from VESA VGA
Mar 13 02:14:35 invisiblethings kernel: [ 1.760496] Console: switching to colour dummy device 80x25
Mar 13 02:14:35 invisiblethings kernel: [ 1.760534] [drm] Replacing VGA console driver
Mar 13 02:14:35 invisiblethings kernel: [ 1.760970] r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded
Mar 13 02:14:35 invisiblethings kernel: [ 1.760976] r8169 0000:03:00.0: can't disable ASPM; OS doesn't have ASPM control
Mar 13 02:14:35 invisiblethings kernel: [ 1.771534] r8169 0000:03:00.0 eth0: RTL8168g/8111g at 0xffffc9000078e000, 48:0f:cf:36:52:2a, XID 0c000800 IRQ 29
Mar 13 02:14:35 invisiblethings kernel: [ 1.771537] r8169 0000:03:00.0 eth0: jumbo features [frames: 9200 bytes, tx checksumming: ko]
Mar 13 02:14:35 invisiblethings kernel: [ 1.771660] usbcore: registered new interface driver usbhid
Mar 13 02:14:35 invisiblethings kernel: [ 1.771661] usbhid: USB HID core driver
Mar 13 02:14:35 invisiblethings kernel: [ 1.777210] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
Mar 13 02:14:35 invisiblethings kernel: [ 1.777213] [drm] Driver supports precise vblank timestamp query.
Mar 13 02:14:35 invisiblethings kernel: [ 1.777324] vgaarb: device changed decodes: PCI:0000:00:02.0,olddecodes=io+mem,decodes=io+mem:owns=io+mem
Mar 13 02:14:35 invisiblethings kernel: [ 1.784987] ACPI: Video Device [GFX0] (multi-head: yes rom: no post: no)
Mar 13 02:14:35 invisiblethings kernel: [ 1.785179] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input6
Mar 13 02:14:35 invisiblethings kernel: [ 1.785250] [drm] Initialized i915 1.6.0 20150522 for 0000:00:02.0 on minor 0
Mar 13 02:14:35 invisiblethings kernel: [ 1.806831] fbcon: inteldrmfb (fb0) is primary device
Mar 13 02:14:35 invisiblethings kernel: [ 1.806881] Console: switching to colour frame buffer device 240x67
Mar 13 02:14:35 invisiblethings kernel: [ 1.806900] i915 0000:00:02.0: fb0: inteldrmfb frame buffer device
Mar 13 02:14:35 invisiblethings kernel: [ 1.806901] i915 0000:00:02.0: registered panic notifier
Mar 13 02:14:35 invisiblethings kernel: [ 1.807379] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:0461:0010.0001/input/input7
Mar 13 02:14:35 invisiblethings kernel: [ 1.809327] r8169 0000:03:00.0 enp3s0: renamed from eth0
Mar 13 02:14:35 invisiblethings kernel: [ 1.860893] hid-generic 0003:0461:0010.0001: input,hidraw0: USB HID v1.10 Keyboard [NOVATEK USB Keyboard] on usb-0000:00:14.0-1/input0
Mar 13 02:14:35 invisiblethings kernel: [ 1.861833] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.1/0003:0461:0010.0002/input/input8
Mar 13 02:14:35 invisiblethings kernel: [ 1.916931] hid-generic 0003:0461:0010.0002: input,hidraw1: USB HID v1.10 Device [NOVATEK USB Keyboard] on usb-0000:00:14.0-1/input1
Mar 13 02:14:35 invisiblethings kernel: [ 1.917004] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2:1.0/0003:03F0:094A.0003/input/input9
Mar 13 02:14:35 invisiblethings kernel: [ 1.917053] hid-generic 0003:03F0:094A.0003: input,hidraw2: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-2/input0
Mar 13 02:14:35 invisiblethings kernel: [ 2.076926] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
Mar 13 02:14:35 invisiblethings kernel: [ 2.078022] ata1.00: ATA-8: WDC WD5000AAKX-60U6AA0, 18.01H18, max UDMA/100
Mar 13 02:14:35 invisiblethings kernel: [ 2.078024] ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA
Mar 13 02:14:35 invisiblethings kernel: [ 2.079186] ata1.00: configured for UDMA/100
Mar 13 02:14:35 invisiblethings kernel: [ 2.079355] scsi 0:0:0:0: Direct-Access ATA WDC WD5000AAKX-6 1H18 PQ: 0 ANSI: 5
Mar 13 02:14:35 invisiblethings kernel: [ 2.079606] sd 0:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/465 GiB)
Mar 13 02:14:35 invisiblethings kernel: [ 2.079633] sd 0:0:0:0: [sda] Write Protect is off
Mar 13 02:14:35 invisiblethings kernel: [ 2.079634] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
Mar 13 02:14:35 invisiblethings kernel: [ 2.079647] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Mar 13 02:14:35 invisiblethings kernel: [ 2.079741] sd 0:0:0:0: Attached scsi generic sg0 type 0
Mar 13 02:14:35 invisiblethings kernel: [ 2.080925] ata5: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
Mar 13 02:14:35 invisiblethings kernel: [ 2.082091] ata5.00: ATAPI: hp DVD A DH16AFSH, DHH6, max UDMA/133
Mar 13 02:14:35 invisiblethings kernel: [ 2.083161] ata5.00: configured for UDMA/133
Mar 13 02:14:35 invisiblethings kernel: [ 2.095811] sda: sda1 sda2 < sda5 >
Mar 13 02:14:35 invisiblethings kernel: [ 2.096166] sd 0:0:0:0: [sda] Attached SCSI disk
Mar 13 02:14:35 invisiblethings kernel: [ 2.099539] scsi 4:0:0:0: CD-ROM hp DVD A DH16AFSH DHH6 PQ: 0 ANSI: 5
Mar 13 02:14:35 invisiblethings kernel: [ 2.132852] sr 4:0:0:0: [sr0] scsi3-mmc drive: 40x/314x writer dvd-ram cd/rw xa/form2 cdda tray
Mar 13 02:14:35 invisiblethings kernel: [ 2.132855] cdrom: Uniform CD-ROM driver Revision: 3.20
Mar 13 02:14:35 invisiblethings kernel: [ 2.132943] sr 4:0:0:0: Attached scsi CD-ROM sr0
Mar 13 02:14:35 invisiblethings kernel: [ 2.132975] sr 4:0:0:0: Attached scsi generic sg1 type 5
Mar 13 02:14:35 invisiblethings kernel: [ 2.573452] clocksource: Switched to clocksource tsc
Mar 13 02:14:35 invisiblethings kernel: [ 13.998544] random: nonblocking pool is initialized
Mar 13 02:14:35 invisiblethings kernel: [ 17.501800] NET: Registered protocol family 38
Mar 13 02:14:35 invisiblethings kernel: [ 30.011762] EXT4-fs (dm-1): mounted filesystem with ordered data mode. Opts: (null)
Mar 13 02:14:35 invisiblethings kernel: [ 31.659965] lp: driver loaded but no devices found
Mar 13 02:14:35 invisiblethings kernel: [ 31.676597] ppdev: user-space parallel port driver
Mar 13 02:14:35 invisiblethings kernel: [ 32.660202] EXT4-fs (dm-1): re-mounted. Opts: errors=remount-ro
Mar 13 02:14:35 invisiblethings kernel: [ 32.980531] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
Mar 13 02:14:35 invisiblethings kernel: [ 33.246845] kvm: disabled by bios
Mar 13 02:14:35 invisiblethings kernel: [ 33.266532] kvm: disabled by bios
Mar 13 02:14:35 invisiblethings kernel: [ 33.352914] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352918] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352924] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352947] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352949] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352952] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352973] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352974] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.352977] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353017] input: HP WMI hotkeys as /devices/virtual/input/input10
Mar 13 02:14:35 invisiblethings kernel: [ 33.353103] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353105] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353109] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353129] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353130] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.353133] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 02:14:35 invisiblethings kernel: [ 33.629102] intel_rapl: Found RAPL domain package
Mar 13 02:14:35 invisiblethings kernel: [ 33.629105] intel_rapl: Found RAPL domain core
Mar 13 02:14:35 invisiblethings kernel: [ 33.629107] intel_rapl: Found RAPL domain uncore
Mar 13 02:14:35 invisiblethings kernel: [ 33.629108] intel_rapl: Found RAPL domain dram
Mar 13 02:14:35 invisiblethings kernel: [ 35.964131] Adding 4115964k swap on /dev/mapper/cryptswap1. Priority:-1 extents:1 across:4115964k FS
Mar 13 02:14:35 invisiblethings kernel: [ 36.107867] EXT4-fs (sda1): mounting ext2 file system using the ext4 subsystem
Mar 13 02:14:35 invisiblethings kernel: [ 36.112307] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null)
Mar 13 02:14:35 invisiblethings kernel: [ 37.417109] audit: type=1400 audit(1457831674.183:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.417115] audit: type=1400 audit(1457831674.183:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="chromium" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.427011] audit: type=1400 audit(1457831674.195:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.427016] audit: type=1400 audit(1457831674.195:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.427019] audit: type=1400 audit(1457831674.195:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.427022] audit: type=1400 audit(1457831674.195:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.446690] audit: type=1400 audit(1457831674.215:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.446697] audit: type=1400 audit(1457831674.215:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.446700] audit: type=1400 audit(1457831674.215:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince-previewer" pid=585 comm="apparmor_parser"
Mar 13 02:14:35 invisiblethings kernel: [ 37.446703] audit: type=1400 audit(1457831674.215:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=585 comm="apparmor_parser"
Mar 13 02:14:36 invisiblethings kernel: [ 39.300108] cgroup: new mount options do not match the existing superblock, will be ignored
Mar 13 02:14:37 invisiblethings kernel: [ 41.185392] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
Mar 13 02:14:38 invisiblethings kernel: [ 41.295061] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:14:38 invisiblethings kernel: [ 41.295090] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
Mar 13 02:14:53 invisiblethings kernel: [ 56.582332] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:14:53 invisiblethings kernel: [ 56.582340] IPv6: ADDRCONF(NETDEV_CHANGE): enp3s0: link becomes ready
Mar 13 02:15:20 invisiblethings gnome-session[1542]: Entering running state
Mar 13 02:45:24 invisiblethings kernel: [ 1888.995074] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:45:27 invisiblethings kernel: [ 1891.888281] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:45:44 invisiblethings kernel: [ 1909.291247] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:46:21 invisiblethings kernel: [ 1946.234287] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:46:31 invisiblethings kernel: [ 1956.582402] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:47:06 invisiblethings kernel: [ 1991.443967] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:52:56 invisiblethings kernel: [ 2341.832704] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:53:29 invisiblethings kernel: [ 2375.027805] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:53:40 invisiblethings kernel: [ 2385.162880] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:54:14 invisiblethings kernel: [ 2420.021322] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:18:33 invisiblethings kernel: [ 3876.146960] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:18:36 invisiblethings kernel: [ 3878.934205] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:18:46 invisiblethings kernel: [ 3889.226711] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:19:21 invisiblethings kernel: [ 3924.262483] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:22:48 invisiblethings kernel: [ 4131.391265] r8169 0000:03:00.0 enp3s0: link down
Mar 13 02:22:51 invisiblethings kernel: [ 4134.079839] r8169 0000:03:00.0 enp3s0: link up
Mar 13 02:52:45 invisiblethings kernel: [ 5928.968591] ip_tables: (C) 2000-2006 Netfilter Core Team
Mar 13 03:27:18 invisiblethings kernel: [ 8003.678880] perf interrupt took too long (2531 > 2500), lowering kernel.perf_event_max_sample_rate to 50000
Mar 13 03:27:35 invisiblethings kernel: [ 8021.355456] audit_printk_skb: 39 callbacks suppressed
Mar 13 03:27:35 invisiblethings kernel: [ 8021.355459] audit: type=1400 audit(1457836055.718:25): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=9774 comm="apparmor_parser"
Mar 13 03:52:51 invisiblethings kernel: [ 9538.641447] SGI XFS with ACLs, security attributes, realtime, no debug enabled
Mar 13 03:52:51 invisiblethings kernel: [ 9538.691702] JFS: nTxBlock = 8192, nTxLock = 65536
Mar 13 03:52:51 invisiblethings kernel: [ 9538.731354] ntfs: driver 2.1.32 [Flags: R/O MODULE].
Mar 13 03:52:51 invisiblethings kernel: [ 9538.756883] QNX4 filesystem 0.2.3 registered.
Mar 13 03:52:51 invisiblethings kernel: [ 9538.848568] raid6: sse2x1 gen() 10173 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9538.916618] raid6: sse2x1 xor() 7975 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9538.984671] raid6: sse2x2 gen() 12929 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9539.052729] raid6: sse2x2 xor() 8705 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9539.120782] raid6: sse2x4 gen() 14934 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9539.188861] raid6: sse2x4 xor() 9403 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9539.188868] raid6: using algorithm sse2x4 gen() 14934 MB/s
Mar 13 03:52:52 invisiblethings kernel: [ 9539.188868] raid6: .... xor() 9403 MB/s, rmw enabled
Mar 13 03:52:52 invisiblethings kernel: [ 9539.188870] raid6: using ssse3x2 recovery algorithm
Mar 13 03:52:52 invisiblethings kernel: [ 9539.199299] xor: measuring software checksum speed
Mar 13 03:52:52 invisiblethings kernel: [ 9539.236875] prefetch64-sse: 21308.000 MB/sec
Mar 13 03:52:52 invisiblethings kernel: [ 9539.276916] generic_sse: 19267.000 MB/sec
Mar 13 03:52:52 invisiblethings kernel: [ 9539.276922] xor: using function: prefetch64-sse (21308.000 MB/sec)
Mar 13 03:52:52 invisiblethings kernel: [ 9539.323843] Btrfs loaded
Mar 13 03:52:52 invisiblethings kernel: [ 9539.728117] EXT4-fs (sda2): unable to read superblock
Mar 13 03:52:52 invisiblethings kernel: [ 9539.729088] EXT4-fs (sda2): unable to read superblock
Mar 13 03:52:52 invisiblethings kernel: [ 9539.730038] EXT4-fs (sda2): unable to read superblock
Mar 13 03:52:52 invisiblethings kernel: [ 9539.730990] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:52:52 invisiblethings kernel: [ 9539.730993] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:52:52 invisiblethings kernel: [ 9539.755011] XFS (sda2): Invalid superblock magic number
Mar 13 03:52:52 invisiblethings kernel: [ 9539.772730] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:52:52 invisiblethings kernel: [ 9539.772734] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:52:52 invisiblethings kernel: [ 9539.775381] MINIX-fs: unable to read superblock
Mar 13 03:52:52 invisiblethings kernel: [ 9539.813967] attempt to access beyond end of device
Mar 13 03:52:52 invisiblethings kernel: [ 9539.813970] sda2: rw=16, want=3, limit=2
Mar 13 03:52:52 invisiblethings kernel: [ 9539.813972] hfsplus: unable to find HFS+ superblock
Mar 13 03:52:52 invisiblethings kernel: [ 9539.815978] qnx4: no qnx4 filesystem (no root dir).
Mar 13 03:52:52 invisiblethings kernel: [ 9539.816980] ufs: You didn't specify the type of your ufs filesystem
Mar 13 03:52:52 invisiblethings kernel: [ 9539.816980]
Mar 13 03:52:52 invisiblethings kernel: [ 9539.816980] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
Mar 13 03:52:52 invisiblethings kernel: [ 9539.816980]
Mar 13 03:52:52 invisiblethings kernel: [ 9539.816980] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
Mar 13 03:52:52 invisiblethings kernel: [ 9539.818559] hfs: can't find a HFS filesystem on dev sda2
Mar 13 03:53:12 invisiblethings kernel: [ 9559.116280] audit: type=1400 audit(1457837592.238:26): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/sbin/dhclient" pid=8234 comm="apparmor_parser"
Mar 13 03:53:12 invisiblethings kernel: [ 9559.116586] audit: type=1400 audit(1457837592.238:27): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=8234 comm="apparmor_parser"
Mar 13 03:53:12 invisiblethings kernel: [ 9559.116793] audit: type=1400 audit(1457837592.238:28): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=8234 comm="apparmor_parser"
Mar 13 03:53:12 invisiblethings kernel: [ 9559.117434] audit: type=1400 audit(1457837592.242:29): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=8234 comm="apparmor_parser"
Mar 13 03:53:30 invisiblethings kernel: [ 9577.880732] EXT4-fs (sda2): unable to read superblock
Mar 13 03:53:30 invisiblethings kernel: [ 9577.881558] EXT4-fs (sda2): unable to read superblock
Mar 13 03:53:30 invisiblethings kernel: [ 9577.882349] EXT4-fs (sda2): unable to read superblock
Geändert von dennissteins (14.03.2016 um 11:11 Uhr) |
|
14.03.2016, 11:07
| #9 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Kern.log Teil 2 Code:
ATTFilter Mar 13 03:53:30 invisiblethings kernel: [ 9577.883267] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:53:30 invisiblethings kernel: [ 9577.883269] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:53:31 invisiblethings kernel: [ 9577.886066] XFS (sda2): Invalid superblock magic number
Mar 13 03:53:31 invisiblethings kernel: [ 9577.888271] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:53:31 invisiblethings kernel: [ 9577.888274] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:53:31 invisiblethings kernel: [ 9577.890773] MINIX-fs: unable to read superblock
Mar 13 03:53:31 invisiblethings kernel: [ 9577.891609] attempt to access beyond end of device
Mar 13 03:53:31 invisiblethings kernel: [ 9577.891611] sda2: rw=16, want=3, limit=2
Mar 13 03:53:31 invisiblethings kernel: [ 9577.891612] hfsplus: unable to find HFS+ superblock
Mar 13 03:53:31 invisiblethings kernel: [ 9577.892520] qnx4: no qnx4 filesystem (no root dir).
Mar 13 03:53:31 invisiblethings kernel: [ 9577.893301] ufs: You didn't specify the type of your ufs filesystem
Mar 13 03:53:31 invisiblethings kernel: [ 9577.893301]
Mar 13 03:53:31 invisiblethings kernel: [ 9577.893301] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
Mar 13 03:53:31 invisiblethings kernel: [ 9577.893301]
Mar 13 03:53:31 invisiblethings kernel: [ 9577.893301] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
Mar 13 03:53:31 invisiblethings kernel: [ 9577.894822] hfs: can't find a HFS filesystem on dev sda2
Mar 13 03:53:36 invisiblethings kernel: [ 9583.000770] audit: type=1400 audit(1457837616.106:30): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cups-browsed" pid=13719 comm="apparmor_parser"
Mar 13 03:53:53 invisiblethings kernel: [ 9600.830777] EXT4-fs (sda2): unable to read superblock
Mar 13 03:53:53 invisiblethings kernel: [ 9600.831645] EXT4-fs (sda2): unable to read superblock
Mar 13 03:53:53 invisiblethings kernel: [ 9600.832475] EXT4-fs (sda2): unable to read superblock
Mar 13 03:53:53 invisiblethings kernel: [ 9600.833372] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:53:53 invisiblethings kernel: [ 9600.833375] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:53:53 invisiblethings kernel: [ 9600.836161] XFS (sda2): Invalid superblock magic number
Mar 13 03:53:53 invisiblethings kernel: [ 9600.838277] FAT-fs (sda2): bogus number of reserved sectors
Mar 13 03:53:53 invisiblethings kernel: [ 9600.838280] FAT-fs (sda2): Can't find a valid FAT filesystem
Mar 13 03:53:53 invisiblethings kernel: [ 9600.841082] MINIX-fs: unable to read superblock
Mar 13 03:53:53 invisiblethings kernel: [ 9600.841927] attempt to access beyond end of device
Mar 13 03:53:53 invisiblethings kernel: [ 9600.841929] sda2: rw=16, want=3, limit=2
Mar 13 03:53:53 invisiblethings kernel: [ 9600.841931] hfsplus: unable to find HFS+ superblock
Mar 13 03:53:53 invisiblethings kernel: [ 9600.842913] qnx4: no qnx4 filesystem (no root dir).
Mar 13 03:53:53 invisiblethings kernel: [ 9600.843740] ufs: You didn't specify the type of your ufs filesystem
Mar 13 03:53:53 invisiblethings kernel: [ 9600.843740]
Mar 13 03:53:53 invisiblethings kernel: [ 9600.843740] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
Mar 13 03:53:53 invisiblethings kernel: [ 9600.843740]
Mar 13 03:53:53 invisiblethings kernel: [ 9600.843740] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
Mar 13 03:53:53 invisiblethings kernel: [ 9600.845245] hfs: can't find a HFS filesystem on dev sda2
Mar 13 03:55:21 invisiblethings kernel: [ 9688.489281] usb 1-9: new high-speed USB device number 4 using xhci_hcd
Mar 13 03:55:21 invisiblethings kernel: [ 9688.680154] usb 1-9: New USB device found, idVendor=058f, idProduct=6387
Mar 13 03:55:21 invisiblethings kernel: [ 9688.680157] usb 1-9: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Mar 13 03:55:21 invisiblethings kernel: [ 9688.680158] usb 1-9: Product: Intenso Basic Line
Mar 13 03:55:21 invisiblethings kernel: [ 9688.680159] usb 1-9: Manufacturer: 6989
Mar 13 03:55:21 invisiblethings kernel: [ 9688.680160] usb 1-9: SerialNumber: A74EF26F
Mar 13 03:55:22 invisiblethings kernel: [ 9689.645925] usb-storage 1-9:1.0: USB Mass Storage device detected
Mar 13 03:55:22 invisiblethings kernel: [ 9689.646171] scsi host5: usb-storage 1-9:1.0
Mar 13 03:55:22 invisiblethings kernel: [ 9689.646244] usbcore: registered new interface driver usb-storage
Mar 13 03:55:22 invisiblethings kernel: [ 9689.799549] usbcore: registered new interface driver uas
Mar 13 03:55:23 invisiblethings kernel: [ 9690.648646] scsi 5:0:0:0: Direct-Access Intenso Basic Line 8.07 PQ: 0 ANSI: 4
Mar 13 03:55:23 invisiblethings kernel: [ 9690.648898] sd 5:0:0:0: Attached scsi generic sg2 type 0
Mar 13 03:55:23 invisiblethings kernel: [ 9690.650253] sd 5:0:0:0: [sdb] 31334400 512-byte logical blocks: (16.0 GB/14.9 GiB)
Mar 13 03:55:23 invisiblethings kernel: [ 9690.650891] sd 5:0:0:0: [sdb] Write Protect is off
Mar 13 03:55:23 invisiblethings kernel: [ 9690.650894] sd 5:0:0:0: [sdb] Mode Sense: 23 00 00 00
Mar 13 03:55:23 invisiblethings kernel: [ 9690.651544] sd 5:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
Mar 13 03:55:23 invisiblethings kernel: [ 9690.655641] sdb: sdb1
Mar 13 03:55:23 invisiblethings kernel: [ 9690.657595] sd 5:0:0:0: [sdb] Attached SCSI removable disk
Mar 13 03:55:25 invisiblethings kernel: [ 9692.300416] FAT-fs (sdb1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
Mar 13 03:55:37 invisiblethings kernel: [ 9704.972300] audit: type=1400 audit(1457837737.978:31): apparmor="DENIED" operation="capable" profile="/usr/bin/evince-thumbnailer" pid=24321 comm="evince-thumbnai" capability=1 capname="dac_override"
Mar 13 03:55:37 invisiblethings kernel: [ 9704.972305] audit: type=1400 audit(1457837737.978:32): apparmor="DENIED" operation="capable" profile="/usr/bin/evince-thumbnailer" pid=24321 comm="evince-thumbnai" capability=2 capname="dac_read_search"
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuset
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpu
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuacct
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Linux version 4.2.0-30-generic (buildd@lgw01-60) (gcc version 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2) ) #36-Ubuntu SMP Fri Feb 26 00:58:07 UTC 2016 (Ubuntu 4.2.0-30.36-generic 4.2.8-ckt3)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-4.2.0-30-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] KERNEL supported cpus:
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Intel GenuineIntel
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] AMD AuthenticAMD
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Centaur CentaurHauls
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers'
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers'
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] x86/fpu: Enabled xstate features 0x3, context size is 0x240 bytes, using 'standard' format.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] x86/fpu: Using 'eager' FPU context switches.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: BIOS-provided physical RAM map:
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000c8b3bfff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b3c000-0x00000000c8b42fff] ACPI NVS
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b43000-0x00000000c9601fff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c9602000-0x00000000c98c2fff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c98c3000-0x00000000dbaf6fff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbaf7000-0x00000000dbb5ffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb60000-0x00000000dbb89fff] ACPI data
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb8a000-0x00000000dbceffff] ACPI NVS
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbcf0000-0x00000000dbffefff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbfff000-0x00000000dbffffff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dd000000-0x00000000df1fffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000f8000000-0x00000000fbffffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed00000-0x00000000fed03fff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000011fdfffff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] NX (Execute Disable) protection: active
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] SMBIOS 2.8 present.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMI: Hewlett-Packard HP 280 G1 MT/2B34, BIOS 80.14 09/28/2015
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0x11fe00 max_arch_pfn = 0x400000000
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] MTRR default type: uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] MTRR fixed ranges enabled:
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 00000-9FFFF write-back
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] A0000-BFFFF uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] C0000-CFFFF write-protect
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] D0000-E7FFF uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] E8000-FFFFF write-protect
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] MTRR variable ranges enabled:
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 0 base 0000000000 mask 7F00000000 write-back
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 1 base 0100000000 mask 7FE0000000 write-back
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 2 base 00E0000000 mask 7FE0000000 uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 3 base 00DE000000 mask 7FFE000000 uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 4 base 00DD000000 mask 7FFF000000 uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 5 base 011FE00000 mask 7FFFE00000 uncachable
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 6 disabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 7 disabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 8 disabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] 9 disabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] original variable MTRRs
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 4GB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 1, base: 4GB, range: 512MB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 2, base: 3584MB, range: 512MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 3, base: 3552MB, range: 32MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 4, base: 3536MB, range: 16MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 5, base: 4606MB, range: 2MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] total RAM covered: 4046M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Found optimal setting for mtrr clean up
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] gran_size: 64K chunk_size: 64M num_reg: 7 lose cover RAM: 0G
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] New variable MTRRs
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 1, base: 2GB, range: 1GB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 2, base: 3GB, range: 512MB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 3, base: 3536MB, range: 16MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 4, base: 3552MB, range: 32MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 5, base: 4GB, range: 512MB, type WB
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] reg 6, base: 4606MB, range: 2MB, type UC
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: update [mem 0xdd000000-0xffffffff] usable ==> reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0xdc000 max_arch_pfn = 0x400000000
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] found SMP MP-table at [mem 0x000fd7c0-0x000fd7cf] mapped at [ffff8800000fd7c0]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Scanning 1 areas for low memory corruption
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Using GB pages for direct mapping
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x00000000-0x000fffff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff1000, 0x01ff1fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff2000, 0x01ff2fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff3000, 0x01ff3fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x11fc00000-0x11fdfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x11fc00000-0x11fdfffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff4000, 0x01ff4fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x100000000-0x11fbfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x100000000-0x11fbfffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc0000000-0xc8b3bfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc0000000-0xc89fffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc8a00000-0xc8b3bfff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff5000, 0x01ff5fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] BRK [0x01ff6000, 0x01ff6fff] PGTABLE
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc8b43000-0xc9601fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc8b43000-0xc8bfffff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc8c00000-0xc95fffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc9600000-0xc9601fff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc98c3000-0xdbaf6fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc98c3000-0xc99fffff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xc9a00000-0xdb9fffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xdba00000-0xdbaf6fff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xdbfff000-0xdbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0xdbfff000-0xdbffffff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00100000-0xbfffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x00100000-0x001fffff] page 4k
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x00200000-0x3fffffff] page 2M
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [mem 0x40000000-0xbfffffff] page 1G
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] RAMDISK: [mem 0x33bd2000-0x35de0fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: Early table checksum verification disabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: RSDP 0x00000000000F0490 000024 (v02 HPQOEM)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: XSDT 0x00000000DBB69088 000094 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: FACP 0x00000000DBB81FA0 00010C (v05 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: DSDT 0x00000000DBB691B0 018DEC (v02 HPQOEM SLIC-CPC 00008014 INTL 20120711)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: FACS 0x00000000DBCEFF80 000040
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: APIC 0x00000000DBB820B0 000062 (v03 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: FPDT 0x00000000DBB82118 000044 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: FIDT 0x00000000DBB82160 00009C (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: TCPA 0x00000000DBB82200 000032 (v02 HPQOEM SLIC-CPC 00000001 MSFT 01000013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82238 000C7D (v02 HPQOEM SLIC-CPC 00001000 INTL 20120711)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82EB8 000539 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB833F8 000B74 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: MCFG 0x00000000DBB83F70 00003C (v01 HPQOEM SLIC-CPC 01072009 MSFT 00000097)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: HPET 0x00000000DBB83FB0 000038 (v01 HPQOEM SLIC-CPC 01072009 AMI. 00000005)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB83FE8 00036D (v01 HPQOEM SLIC-CPC 00001000 INTL 20120711)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB84358 005722 (v02 HPQOEM SLIC-CPC 00003000 INTL 20120711)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: UEFI 0x00000000DBB89A80 000042 (v01 HPQOEM SLIC-CPC 01072009 00000000)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: DBGP 0x00000000DBB89AC8 000034 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: Local APIC address 0xfee00000
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] No NUMA configuration found
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000011fdfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] NODE_DATA(0) allocated [mem 0x11fdf7000-0x11fdfbfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] [ffffea0000000000-ffffea00047fffff] PMD -> [ffff88011b400000-ffff88011f3fffff] on node 0
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Zone ranges:
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Normal [mem 0x0000000100000000-0x000000011fdfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Movable zone start for each node
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Early memory node ranges
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009cfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000000100000-0x00000000c8b3bfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000c8b43000-0x00000000c9601fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000c98c3000-0x00000000dbaf6fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x00000000dbfff000-0x00000000dbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] node 0: [mem 0x0000000100000000-0x000000011fdfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000011fdfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] On node 0 totalpages: 1029580
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA zone: 64 pages used for memmap
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA zone: 21 pages reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA zone: 3996 pages, LIFO batch:0
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA32 zone: 13985 pages used for memmap
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] DMA32 zone: 895024 pages, LIFO batch:31
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Normal zone: 2040 pages used for memmap
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Normal zone: 130560 pages, LIFO batch:31
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Reserving Intel graphics stolen memory at 0xdd200000-0xdf1fffff
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: PM-Timer IO Port: 0x1808
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: Local APIC address 0xfee00000
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] IOAPIC[0]: apic_id 8, version 32, address 0xfec00000, GSI 0-23
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: IRQ0 used by override.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: IRQ9 used by override.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Using ACPI (MADT) for SMP configuration information
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] ACPI: HPET id: 0x8086a701 base: 0xfed00000
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000dffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0x000e0000-0x000fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xc8b3c000-0xc8b42fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xc9602000-0xc98c2fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbaf7000-0xdbb5ffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbb60000-0xdbb89fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbb8a000-0xdbceffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdbcf0000-0xdbffefff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdc000000-0xdcffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdd000000-0xdf1fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xdf200000-0xf7ffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xf8000000-0xfbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfc000000-0xfebfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfec00000-0xfec00fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfec01000-0xfecfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed00000-0xfed03fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed04000-0xfed1bfff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfed20000-0xfedfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfee00000-0xfee00fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xfee01000-0xfeffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PM: Registered nosave memory: [mem 0xff000000-0xffffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] e820: [mem 0xdf200000-0xf7ffffff] available for PCI devices
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Booting paravirtualized kernel on bare hardware
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:2 nr_node_ids:1
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PERCPU: Embedded 33 pages/cpu @ffff88011fa00000 s96728 r8192 d30248 u1048576
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] pcpu-alloc: s96728 r8192 d30248 u1048576 alloc=1*2097152
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] pcpu-alloc: [0] 0 1
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1013470
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Policy zone: Normal
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-4.2.0-30-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing!
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Memory: 3934872K/4118320K available (8158K kernel code, 1238K rwdata, 3804K rodata, 1464K init, 1292K bss, 183448K reserved, 0K cma-reserved)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Hierarchical RCU implementation.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Build-time adjustment of leaf fanout to 64.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=2.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] NR_IRQS:16640 nr_irqs:440 16
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Offload RCU callbacks from all CPUs
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Offload RCU callbacks from CPUs: 0-1.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] spurious 8259A interrupt: IRQ7.
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] vt handoff: transparent VT on vt#7
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] Console: colour dummy device 80x25
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] console [tty0] enabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] hpet clockevent registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] tsc: Fast TSC calibration using PIT
Mar 13 03:58:10 invisiblethings kernel: [ 0.000000] tsc: Detected 3192.570 MHz processor
Mar 13 03:58:10 invisiblethings kernel: [ 0.000022] Calibrating delay loop (skipped), value calculated using timer frequency.. 6385.14 BogoMIPS (lpj=12770280)
Mar 13 03:58:10 invisiblethings kernel: [ 0.000024] pid_max: default: 32768 minimum: 301
Mar 13 03:58:10 invisiblethings kernel: [ 0.000028] ACPI: Core revision 20150619
Mar 13 03:58:10 invisiblethings kernel: [ 0.014966] ACPI: All ACPI Tables successfully acquired
Mar 13 03:58:10 invisiblethings kernel: [ 0.014981] Security Framework initialized
Mar 13 03:58:10 invisiblethings kernel: [ 0.014989] AppArmor: AppArmor initialized
Mar 13 03:58:10 invisiblethings kernel: [ 0.014989] Yama: becoming mindful.
Mar 13 03:58:10 invisiblethings kernel: [ 0.015191] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.016231] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.016741] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.016746] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.016919] Initializing cgroup subsys blkio
Mar 13 03:58:10 invisiblethings kernel: [ 0.016922] Initializing cgroup subsys memory
Mar 13 03:58:10 invisiblethings kernel: [ 0.016927] Initializing cgroup subsys devices
Mar 13 03:58:10 invisiblethings kernel: [ 0.016928] Initializing cgroup subsys freezer
Mar 13 03:58:10 invisiblethings kernel: [ 0.016930] Initializing cgroup subsys net_cls
Mar 13 03:58:10 invisiblethings kernel: [ 0.016932] Initializing cgroup subsys perf_event
Mar 13 03:58:10 invisiblethings kernel: [ 0.016933] Initializing cgroup subsys net_prio
Mar 13 03:58:10 invisiblethings kernel: [ 0.016935] Initializing cgroup subsys hugetlb
Mar 13 03:58:10 invisiblethings kernel: [ 0.016952] CPU: Physical Processor ID: 0
Mar 13 03:58:10 invisiblethings kernel: [ 0.016953] CPU: Processor Core ID: 0
Mar 13 03:58:10 invisiblethings kernel: [ 0.016956] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
Mar 13 03:58:10 invisiblethings kernel: [ 0.016957] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)
Mar 13 03:58:10 invisiblethings kernel: [ 0.017712] mce: CPU supports 7 MCE banks
Mar 13 03:58:10 invisiblethings kernel: [ 0.017721] CPU0: Thermal monitoring enabled (TM1)
Mar 13 03:58:10 invisiblethings kernel: [ 0.017728] process: using mwait in idle threads
Mar 13 03:58:10 invisiblethings kernel: [ 0.017730] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024
Mar 13 03:58:10 invisiblethings kernel: [ 0.017731] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4
Mar 13 03:58:10 invisiblethings kernel: [ 0.018008] Freeing SMP alternatives memory: 28K (ffffffff81ea5000 - ffffffff81eac000)
Mar 13 03:58:10 invisiblethings kernel: [ 0.019495] ftrace: allocating 30940 entries in 121 pages
Mar 13 03:58:10 invisiblethings kernel: [ 0.029804] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=0 pin2=0
Mar 13 03:58:10 invisiblethings kernel: [ 0.069524] TSC deadline timer enabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.069527] smpboot: CPU0: Intel(R) Pentium(R) CPU G3250 @ 3.20GHz (fam: 06, model: 3c, stepping: 03)
Mar 13 03:58:10 invisiblethings kernel: [ 0.069547] Performance Events: PEBS fmt2+, 16-deep LBR, Haswell events, full-width counters, Intel PMU driver.
Mar 13 03:58:10 invisiblethings kernel: [ 0.069562] ... version: 3
Mar 13 03:58:10 invisiblethings kernel: [ 0.069563] ... bit width: 48
Mar 13 03:58:10 invisiblethings kernel: [ 0.069563] ... generic registers: 8
Mar 13 03:58:10 invisiblethings kernel: [ 0.069564] ... value mask: 0000ffffffffffff
Mar 13 03:58:10 invisiblethings kernel: [ 0.069564] ... max period: 0000ffffffffffff
Mar 13 03:58:10 invisiblethings kernel: [ 0.069565] ... fixed-purpose events: 3
Mar 13 03:58:10 invisiblethings kernel: [ 0.069566] ... event mask: 00000007000000ff
Mar 13 03:58:10 invisiblethings kernel: [ 0.070153] x86: Booting SMP configuration:
Mar 13 03:58:10 invisiblethings kernel: [ 0.070154] .... node #0, CPUs: #1
Mar 13 03:58:10 invisiblethings kernel: [ 0.074089] x86: Booted up 1 node, 2 CPUs
Mar 13 03:58:10 invisiblethings kernel: [ 0.074092] smpboot: Total of 2 processors activated (12770.28 BogoMIPS)
Mar 13 03:58:10 invisiblethings kernel: [ 0.074119] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
Mar 13 03:58:10 invisiblethings kernel: [ 0.075493] devtmpfs: initialized
Mar 13 03:58:10 invisiblethings kernel: [ 0.076828] evm: security.selinux
Mar 13 03:58:10 invisiblethings kernel: [ 0.076829] evm: security.SMACK64
Mar 13 03:58:10 invisiblethings kernel: [ 0.076830] evm: security.SMACK64EXEC
Mar 13 03:58:10 invisiblethings kernel: [ 0.076830] evm: security.SMACK64TRANSMUTE
Mar 13 03:58:10 invisiblethings kernel: [ 0.076831] evm: security.SMACK64MMAP
Mar 13 03:58:10 invisiblethings kernel: [ 0.076831] evm: security.ima
Mar 13 03:58:10 invisiblethings kernel: [ 0.076832] evm: security.capability
Mar 13 03:58:10 invisiblethings kernel: [ 0.076871] PM: Registering ACPI NVS region [mem 0xc8b3c000-0xc8b42fff] (28672 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.076872] PM: Registering ACPI NVS region [mem 0xdbb8a000-0xdbceffff] (1466368 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.076931] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
Mar 13 03:58:10 invisiblethings kernel: [ 0.076980] pinctrl core: initialized pinctrl subsystem
Mar 13 03:58:10 invisiblethings kernel: [ 0.077063] RTC time: 2:56:56, date: 03/13/16
Mar 13 03:58:10 invisiblethings kernel: [ 0.077144] NET: Registered protocol family 16
Mar 13 03:58:10 invisiblethings kernel: [ 0.086115] cpuidle: using governor ladder
Mar 13 03:58:10 invisiblethings kernel: [ 0.094127] cpuidle: using governor menu
Mar 13 03:58:10 invisiblethings kernel: [ 0.094175] ACPI FADT declares the system doesn't support PCIe ASPM, so disable it
Mar 13 03:58:10 invisiblethings kernel: [ 0.094176] ACPI: bus type PCI registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.094177] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
Mar 13 03:58:10 invisiblethings kernel: [ 0.094224] PCI: MMCONFIG for domain 0000 [bus 00-3f] at [mem 0xf8000000-0xfbffffff] (base 0xf8000000)
Mar 13 03:58:10 invisiblethings kernel: [ 0.094225] PCI: MMCONFIG at [mem 0xf8000000-0xfbffffff] reserved in E820
Mar 13 03:58:10 invisiblethings kernel: [ 0.094232] PCI: Using configuration type 1 for base access
Mar 13 03:58:10 invisiblethings kernel: [ 0.094367] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
Mar 13 03:58:10 invisiblethings kernel: [ 0.094375] perf_event_intel: PMU erratum BJ122, BV98, HSD29 workaround disabled, HT off
Mar 13 03:58:10 invisiblethings kernel: [ 0.102357] ACPI: Added _OSI(Module Device)
Mar 13 03:58:10 invisiblethings kernel: [ 0.102358] ACPI: Added _OSI(Processor Device)
Mar 13 03:58:10 invisiblethings kernel: [ 0.102359] ACPI: Added _OSI(3.0 _SCP Extensions)
Mar 13 03:58:10 invisiblethings kernel: [ 0.102360] ACPI: Added _OSI(Processor Aggregator Device)
Mar 13 03:58:10 invisiblethings kernel: [ 0.105960] ACPI: Executed 6 blocks of module-level executable AML code
Mar 13 03:58:10 invisiblethings kernel: [ 0.110400] ACPI: Dynamic OEM Table Load:
Mar 13 03:58:10 invisiblethings kernel: [ 0.110405] ACPI: SSDT 0xFFFF88011A5B9400 0003D3 (v02 HPQOEM SLIC-CPC 00003001 INTL 20051117)
Mar 13 03:58:10 invisiblethings kernel: [ 0.110994] ACPI: Dynamic OEM Table Load:
Mar 13 03:58:10 invisiblethings kernel: [ 0.110998] ACPI: SSDT 0xFFFF88011B016800 0005AA (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 03:58:10 invisiblethings kernel: [ 0.111631] ACPI: Dynamic OEM Table Load:
Mar 13 03:58:10 invisiblethings kernel: [ 0.111634] ACPI: SSDT 0xFFFF88011A5DB000 000119 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
Mar 13 03:58:10 invisiblethings kernel: [ 0.112299] ACPI: Interpreter enabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.112306] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580)
Mar 13 03:58:10 invisiblethings kernel: [ 0.112312] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580)
Mar 13 03:58:10 invisiblethings kernel: [ 0.112329] ACPI: (supports S0 S3 S4 S5)
Mar 13 03:58:10 invisiblethings kernel: [ 0.112330] ACPI: Using IOAPIC for interrupt routing
Mar 13 03:58:10 invisiblethings kernel: [ 0.112353] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
Mar 13 03:58:10 invisiblethings kernel: [ 0.112703] ACPI: Power Resource [PG00] (on)
Mar 13 03:58:10 invisiblethings kernel: [ 0.112914] ACPI: Power Resource [PG01] (on)
Mar 13 03:58:10 invisiblethings kernel: [ 0.113122] ACPI: Power Resource [PG02] (on)
Mar 13 03:58:10 invisiblethings kernel: [ 0.115641] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.115829] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116018] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116221] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116404] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116589] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116771] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.116955] ACPI: Power Resource [WRST] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.119235] ACPI: Power Resource [FN00] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.119290] ACPI: Power Resource [FN01] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.119343] ACPI: Power Resource [FN02] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.119398] ACPI: Power Resource [FN03] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.119452] ACPI: Power Resource [FN04] (off)
Mar 13 03:58:10 invisiblethings kernel: [ 0.120079] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-3e])
Mar 13 03:58:10 invisiblethings kernel: [ 0.120084] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120582] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120583] acpi PNP0A08:00: FADT indicates ASPM is unsupported, using BIOS configuration
Mar 13 03:58:10 invisiblethings kernel: [ 0.120742] acpi PNP0A08:00: host bridge window expanded to [mem 0xdf200000-0xfeafffff window]; [mem 0xfe101000-0xfe113fff window] ignored
Mar 13 03:58:10 invisiblethings kernel: [ 0.120878] PCI host bridge to bus 0000:00
Mar 13 03:58:10 invisiblethings kernel: [ 0.120880] pci_bus 0000:00: root bus resource [bus 00-3e]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120881] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120882] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120884] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120885] pci_bus 0000:00: root bus resource [mem 0x000d0000-0x000d3fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120886] pci_bus 0000:00: root bus resource [mem 0x000d4000-0x000d7fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120887] pci_bus 0000:00: root bus resource [mem 0x000d8000-0x000dbfff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120888] pci_bus 0000:00: root bus resource [mem 0x000dc000-0x000dffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120890] pci_bus 0000:00: root bus resource [mem 0x000e0000-0x000e3fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120891] pci_bus 0000:00: root bus resource [mem 0x000e4000-0x000e7fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120892] pci_bus 0000:00: root bus resource [mem 0xdf200000-0xfeafffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.120898] pci 0000:00:00.0: [8086:0c00] type 00 class 0x060000
Mar 13 03:58:10 invisiblethings kernel: [ 0.120961] pci 0000:00:01.0: [8086:0c01] type 01 class 0x060400
Mar 13 03:58:10 invisiblethings kernel: [ 0.120985] pci 0000:00:01.0: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121036] pci 0000:00:01.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.121066] pci 0000:00:02.0: [8086:0402] type 00 class 0x030000
Mar 13 03:58:10 invisiblethings kernel: [ 0.121073] pci 0000:00:02.0: reg 0x10: [mem 0xf7800000-0xf7bfffff 64bit]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121078] pci 0000:00:02.0: reg 0x18: [mem 0xe0000000-0xefffffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121082] pci 0000:00:02.0: reg 0x20: [io 0xf000-0xf03f]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121169] pci 0000:00:14.0: [8086:8c31] type 00 class 0x0c0330
Mar 13 03:58:10 invisiblethings kernel: [ 0.121186] pci 0000:00:14.0: reg 0x10: [mem 0xf7d00000-0xf7d0ffff 64bit]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121236] pci 0000:00:14.0: PME# supported from D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121269] pci 0000:00:14.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.121297] pci 0000:00:16.0: [8086:8c3a] type 00 class 0x078000
Mar 13 03:58:10 invisiblethings kernel: [ 0.121313] pci 0000:00:16.0: reg 0x10: [mem 0xf7d15000-0xf7d1500f 64bit]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121366] pci 0000:00:16.0: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121445] pci 0000:00:1a.0: [8086:8c2d] type 00 class 0x0c0320
Mar 13 03:58:10 invisiblethings kernel: [ 0.121461] pci 0000:00:1a.0: reg 0x10: [mem 0xf7d13000-0xf7d133ff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121531] pci 0000:00:1a.0: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121565] pci 0000:00:1a.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.121594] pci 0000:00:1c.0: [8086:8c10] type 01 class 0x060400
Mar 13 03:58:10 invisiblethings kernel: [ 0.121646] pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121704] pci 0000:00:1c.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.121734] pci 0000:00:1c.3: [8086:8c16] type 01 class 0x060400
Mar 13 03:58:10 invisiblethings kernel: [ 0.121786] pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121843] pci 0000:00:1c.3: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.121875] pci 0000:00:1d.0: [8086:8c26] type 00 class 0x0c0320
Mar 13 03:58:10 invisiblethings kernel: [ 0.121891] pci 0000:00:1d.0: reg 0x10: [mem 0xf7d12000-0xf7d123ff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.121962] pci 0000:00:1d.0: PME# supported from D0 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.121996] pci 0000:00:1d.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.122026] pci 0000:00:1f.0: [8086:8c5c] type 00 class 0x060100
Mar 13 03:58:10 invisiblethings kernel: [ 0.122161] pci 0000:00:1f.2: [8086:8c02] type 00 class 0x010601
Mar 13 03:58:10 invisiblethings kernel: [ 0.122173] pci 0000:00:1f.2: reg 0x10: [io 0xf0b0-0xf0b7]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122180] pci 0000:00:1f.2: reg 0x14: [io 0xf0a0-0xf0a3]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122186] pci 0000:00:1f.2: reg 0x18: [io 0xf090-0xf097]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122193] pci 0000:00:1f.2: reg 0x1c: [io 0xf080-0xf083]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122200] pci 0000:00:1f.2: reg 0x20: [io 0xf060-0xf07f]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122207] pci 0000:00:1f.2: reg 0x24: [mem 0xf7d11000-0xf7d117ff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122234] pci 0000:00:1f.2: PME# supported from D3hot
Mar 13 03:58:10 invisiblethings kernel: [ 0.122285] pci 0000:00:1f.3: [8086:8c22] type 00 class 0x0c0500
Mar 13 03:58:10 invisiblethings kernel: [ 0.122299] pci 0000:00:1f.3: reg 0x10: [mem 0xf7d10000-0xf7d100ff 64bit]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122316] pci 0000:00:1f.3: reg 0x20: [io 0xf040-0xf05f]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122399] pci 0000:00:01.0: PCI bridge to [bus 01]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122448] pci 0000:00:1c.0: PCI bridge to [bus 02]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122512] pci 0000:03:00.0: [10ec:8168] type 00 class 0x020000
Mar 13 03:58:10 invisiblethings kernel: [ 0.122530] pci 0000:03:00.0: reg 0x10: [io 0xe000-0xe0ff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122557] pci 0000:03:00.0: reg 0x18: [mem 0xf7c00000-0xf7c00fff 64bit]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122573] pci 0000:03:00.0: reg 0x20: [mem 0xf0000000-0xf0003fff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.122648] pci 0000:03:00.0: supports D1 D2
Mar 13 03:58:10 invisiblethings kernel: [ 0.122650] pci 0000:03:00.0: PME# supported from D0 D1 D2 D3hot D3cold
Mar 13 03:58:10 invisiblethings kernel: [ 0.122694] pci 0000:03:00.0: System wakeup disabled by ACPI
Mar 13 03:58:10 invisiblethings kernel: [ 0.130205] pci 0000:00:1c.3: PCI bridge to [bus 03]
Mar 13 03:58:10 invisiblethings kernel: [ 0.130208] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.130211] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.130216] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.130857] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 10 *11 12 14 15)
Mar 13 03:58:10 invisiblethings kernel: [ 0.130891] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 03:58:10 invisiblethings kernel: [ 0.130926] ACPI: PCI Interrupt Link [LNKC] (IRQs *3 4 5 6 10 11 12 14 15)
Mar 13 03:58:10 invisiblethings kernel: [ 0.130958] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 5 6 *10 11 12 14 15)
Mar 13 03:58:10 invisiblethings kernel: [ 0.130989] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 03:58:10 invisiblethings kernel: [ 0.131020] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 03:58:10 invisiblethings kernel: [ 0.131052] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
Mar 13 03:58:10 invisiblethings kernel: [ 0.131084] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 *5 6 10 11 12 14 15)
Mar 13 03:58:10 invisiblethings kernel: [ 0.131290] ACPI: Enabled 6 GPEs in block 00 to 3F
Mar 13 03:58:10 invisiblethings kernel: [ 0.131372] vgaarb: setting as boot device: PCI:0000:00:02.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.131374] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
Mar 13 03:58:10 invisiblethings kernel: [ 0.131375] vgaarb: loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.131376] vgaarb: bridge control possible 0000:00:02.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.131531] SCSI subsystem initialized
Mar 13 03:58:10 invisiblethings kernel: [ 0.131561] libata version 3.00 loaded.
Mar 13 03:58:10 invisiblethings kernel: [ 0.131576] ACPI: bus type USB registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.131588] usbcore: registered new interface driver usbfs
Mar 13 03:58:10 invisiblethings kernel: [ 0.131594] usbcore: registered new interface driver hub
Mar 13 03:58:10 invisiblethings kernel: [ 0.131601] usbcore: registered new device driver usb
Mar 13 03:58:10 invisiblethings kernel: [ 0.131693] PCI: Using ACPI for IRQ routing
Mar 13 03:58:10 invisiblethings kernel: [ 0.132932] PCI: pci_cache_line_size set to 64 bytes
Mar 13 03:58:10 invisiblethings kernel: [ 0.132960] e820: reserve RAM buffer [mem 0x0009d800-0x0009ffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.132961] e820: reserve RAM buffer [mem 0xc8b3c000-0xcbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.132962] e820: reserve RAM buffer [mem 0xc9602000-0xcbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.132963] e820: reserve RAM buffer [mem 0xdbaf7000-0xdbffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.132964] e820: reserve RAM buffer [mem 0x11fe00000-0x11fffffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.133046] NetLabel: Initializing
Mar 13 03:58:10 invisiblethings kernel: [ 0.133047] NetLabel: domain hash size = 128
Mar 13 03:58:10 invisiblethings kernel: [ 0.133047] NetLabel: protocols = UNLABELED CIPSOv4
Mar 13 03:58:10 invisiblethings kernel: [ 0.133056] NetLabel: unlabeled traffic allowed by default
Mar 13 03:58:10 invisiblethings kernel: [ 0.133106] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0
Mar 13 03:58:10 invisiblethings kernel: [ 0.133110] hpet0: 8 comparators, 64-bit 14.318180 MHz counter
Mar 13 03:58:10 invisiblethings kernel: [ 0.136136] clocksource: Switched to clocksource hpet
Mar 13 03:58:10 invisiblethings kernel: [ 0.141401] AppArmor: AppArmor Filesystem Enabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.141464] pnp: PnP ACPI init
Mar 13 03:58:10 invisiblethings kernel: [ 0.141634] system 00:00: [io 0x0800-0x087f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141637] system 00:00: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.141656] pnp 00:01: Plug and Play ACPI device, IDs PNP0b00 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.141680] system 00:02: [io 0x1854-0x1857] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141682] system 00:02: Plug and Play ACPI device, IDs INT3f0d PNP0c02 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.141819] system 00:03: [io 0x0a00-0x0a1f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141820] system 00:03: [io 0x0a20-0x0a2f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141821] system 00:03: [io 0x0a30-0x0a3f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141822] system 00:03: [io 0x0a40-0x0a7f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141823] system 00:03: [io 0x0a50-0x0a5f] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141825] system 00:03: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.141872] system 00:04: [io 0x04d0-0x04d1] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.141873] system 00:04: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.142000] pnp 00:05: Plug and Play ACPI device, IDs PNP0c31 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.142213] system 00:06: [mem 0xfed1c000-0xfed1ffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142215] system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142216] system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142217] system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142219] system 00:06: [mem 0xf8000000-0xfbffffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142220] system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142222] system 00:06: [mem 0xfed90000-0xfed93fff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142223] system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142224] system 00:06: [mem 0xff000000-0xffffffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142226] system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142227] system 00:06: [mem 0xf7fe0000-0xf7feffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142228] system 00:06: [mem 0xf7ff0000-0xf7ffffff] has been reserved
Mar 13 03:58:10 invisiblethings kernel: [ 0.142230] system 00:06: Plug and Play ACPI device, IDs PNP0c02 (active)
Mar 13 03:58:10 invisiblethings kernel: [ 0.142372] pnp: PnP ACPI: found 7 devices
Mar 13 03:58:10 invisiblethings kernel: [ 0.148231] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
Mar 13 03:58:10 invisiblethings kernel: [ 0.148245] pci 0000:00:1c.0: bridge window [io 0x1000-0x0fff] to [bus 02] add_size 1000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148247] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 02] add_size 200000 add_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148248] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff] to [bus 02] add_size 200000 add_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148257] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x000fffff] res_to_dev_res add_size 200000 min_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148258] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x002fffff] res_to_dev_res add_size 200000 min_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148260] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148261] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x002fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148262] pci 0000:00:1c.0: res[13]=[io 0x1000-0x0fff] res_to_dev_res add_size 1000 min_align 1000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148263] pci 0000:00:1c.0: res[13]=[io 0x1000-0x1fff] res_to_dev_res add_size 1000 min_align 1000
Mar 13 03:58:10 invisiblethings kernel: [ 0.148268] pci 0000:00:1c.0: BAR 14: assigned [mem 0xdf200000-0xdf3fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148272] pci 0000:00:1c.0: BAR 15: assigned [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148274] pci 0000:00:1c.0: BAR 13: assigned [io 0x2000-0x2fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148275] pci 0000:00:01.0: PCI bridge to [bus 01]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148280] pci 0000:00:1c.0: PCI bridge to [bus 02]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148283] pci 0000:00:1c.0: bridge window [io 0x2000-0x2fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148287] pci 0000:00:1c.0: bridge window [mem 0xdf200000-0xdf3fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148290] pci 0000:00:1c.0: bridge window [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148295] pci 0000:00:1c.3: PCI bridge to [bus 03]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148298] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148302] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148305] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148310] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148312] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148313] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148314] pci_bus 0000:00: resource 7 [mem 0x000d0000-0x000d3fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148315] pci_bus 0000:00: resource 8 [mem 0x000d4000-0x000d7fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148316] pci_bus 0000:00: resource 9 [mem 0x000d8000-0x000dbfff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148316] pci_bus 0000:00: resource 10 [mem 0x000dc000-0x000dffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148318] pci_bus 0000:00: resource 11 [mem 0x000e0000-0x000e3fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148318] pci_bus 0000:00: resource 12 [mem 0x000e4000-0x000e7fff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148319] pci_bus 0000:00: resource 13 [mem 0xdf200000-0xfeafffff window]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148321] pci_bus 0000:02: resource 0 [io 0x2000-0x2fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148322] pci_bus 0000:02: resource 1 [mem 0xdf200000-0xdf3fffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148323] pci_bus 0000:02: resource 2 [mem 0xdf400000-0xdf5fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148324] pci_bus 0000:03: resource 0 [io 0xe000-0xefff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148325] pci_bus 0000:03: resource 1 [mem 0xf7c00000-0xf7cfffff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148326] pci_bus 0000:03: resource 2 [mem 0xf0000000-0xf00fffff 64bit pref]
Mar 13 03:58:10 invisiblethings kernel: [ 0.148348] NET: Registered protocol family 2
Mar 13 03:58:10 invisiblethings kernel: [ 0.148459] TCP established hash table entries: 32768 (order: 6, 262144 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.148538] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.148655] TCP: Hash tables configured (established 32768 bind 32768)
Mar 13 03:58:10 invisiblethings kernel: [ 0.148676] UDP hash table entries: 2048 (order: 4, 65536 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.148692] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.148733] NET: Registered protocol family 1
Mar 13 03:58:10 invisiblethings kernel: [ 0.148745] pci 0000:00:02.0: Video device with shadowed ROM
Mar 13 03:58:10 invisiblethings kernel: [ 0.188254] PCI: CLS 64 bytes, default 64
Mar 13 03:58:10 invisiblethings kernel: [ 0.188296] Trying to unpack rootfs image as initramfs...
Mar 13 03:58:10 invisiblethings kernel: [ 0.570372] Freeing initrd memory: 34876K (ffff880033bd2000 - ffff880035de1000)
Mar 13 03:58:10 invisiblethings kernel: [ 0.570388] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Mar 13 03:58:10 invisiblethings kernel: [ 0.570390] software IO TLB [mem 0xd7af7000-0xdbaf7000] (64MB) mapped at [ffff8800d7af7000-ffff8800dbaf6fff]
Mar 13 03:58:10 invisiblethings kernel: [ 0.570451] RAPL PMU detected, API unit is 2^-32 Joules, 4 fixed counters 655360 ms ovfl timer
Mar 13 03:58:10 invisiblethings kernel: [ 0.570452] hw unit of domain pp0-core 2^-14 Joules
Mar 13 03:58:10 invisiblethings kernel: [ 0.570453] hw unit of domain package 2^-14 Joules
Mar 13 03:58:10 invisiblethings kernel: [ 0.570453] hw unit of domain dram 2^-14 Joules
Mar 13 03:58:10 invisiblethings kernel: [ 0.570454] hw unit of domain pp1-gpu 2^-14 Joules
Mar 13 03:58:10 invisiblethings kernel: [ 0.570550] microcode: CPU0 sig=0x306c3, pf=0x2, revision=0x1d
Mar 13 03:58:10 invisiblethings kernel: [ 0.570554] microcode: CPU1 sig=0x306c3, pf=0x2, revision=0x1d
Mar 13 03:58:10 invisiblethings kernel: [ 0.570596] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
Mar 13 03:58:10 invisiblethings kernel: [ 0.570657] Scanning for low memory corruption every 60 seconds
Mar 13 03:58:10 invisiblethings kernel: [ 0.570902] futex hash table entries: 512 (order: 3, 32768 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.570918] Initialise system trusted keyring
Mar 13 03:58:10 invisiblethings kernel: [ 0.570936] audit: initializing netlink subsys (disabled)
Mar 13 03:58:10 invisiblethings kernel: [ 0.570950] audit: type=2000 audit(1457837815.568:1): initialized
Mar 13 03:58:10 invisiblethings kernel: [ 0.571214] HugeTLB registered 1 GB page size, pre-allocated 0 pages
Mar 13 03:58:10 invisiblethings kernel: [ 0.571215] HugeTLB registered 2 MB page size, pre-allocated 0 pages
Mar 13 03:58:10 invisiblethings kernel: [ 0.572220] zpool: loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.572221] zbud: loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.572346] VFS: Disk quotas dquot_6.6.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.572369] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
Mar 13 03:58:10 invisiblethings kernel: [ 0.572682] fuse init (API version 7.23)
Mar 13 03:58:10 invisiblethings kernel: [ 0.572779] Key type big_key registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.573014] Key type asymmetric registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.573016] Asymmetric key parser 'x509' registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.573027] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
Mar 13 03:58:10 invisiblethings kernel: [ 0.573046] io scheduler noop registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.573048] io scheduler deadline registered (default)
Mar 13 03:58:10 invisiblethings kernel: [ 0.573069] io scheduler cfq registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.573486] pcieport 0000:00:01.0: Signaling PME through PCIe PME interrupt
Mar 13 03:58:10 invisiblethings kernel: [ 0.573489] pcie_pme 0000:00:01.0:pcie01: service driver pcie_pme loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.573504] pcieport 0000:00:1c.0: Signaling PME through PCIe PME interrupt
Mar 13 03:58:10 invisiblethings kernel: [ 0.573507] pcie_pme 0000:00:1c.0:pcie01: service driver pcie_pme loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.573521] pcieport 0000:00:1c.3: Signaling PME through PCIe PME interrupt
Mar 13 03:58:10 invisiblethings kernel: [ 0.573522] pci 0000:03:00.0: Signaling PME through PCIe PME interrupt
Mar 13 03:58:10 invisiblethings kernel: [ 0.573526] pcie_pme 0000:00:1c.3:pcie01: service driver pcie_pme loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.573530] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Mar 13 03:58:10 invisiblethings kernel: [ 0.573540] pciehp 0000:00:1c.0:pcie04: Slot #0 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ LLActRep+
Mar 13 03:58:10 invisiblethings kernel: [ 0.573557] pciehp 0000:00:1c.0:pcie04: service driver pciehp loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.573559] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
Mar 13 03:58:10 invisiblethings kernel: [ 0.573583] vesafb: mode is 1920x1080x32, linelength=7680, pages=0
Mar 13 03:58:10 invisiblethings kernel: [ 0.573584] vesafb: scrolling: redraw
Mar 13 03:58:10 invisiblethings kernel: [ 0.573585] vesafb: Truecolor: size=8:8:8:8, shift=24:16:8:0
Mar 13 03:58:10 invisiblethings kernel: [ 0.573594] vesafb: framebuffer at 0xe0000000, mapped to 0xffffc90000800000, using 8128k, total 8128k
Mar 13 03:58:10 invisiblethings kernel: [ 0.573670] Console: switching to colour frame buffer device 240x67
Mar 13 03:58:10 invisiblethings kernel: [ 0.573686] fb0: VESA VGA frame buffer device
Mar 13 03:58:10 invisiblethings kernel: [ 0.573698] intel_idle: MWAIT substates: 0x2120
Mar 13 03:58:10 invisiblethings kernel: [ 0.573699] intel_idle: v0.4 model 0x3C
Mar 13 03:58:10 invisiblethings kernel: [ 0.573699] intel_idle: lapic_timer_reliable_states 0xffffffff
Mar 13 03:58:10 invisiblethings kernel: [ 0.573815] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
Mar 13 03:58:10 invisiblethings kernel: [ 0.573818] ACPI: Power Button [PWRB]
Mar 13 03:58:10 invisiblethings kernel: [ 0.573842] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1
Mar 13 03:58:10 invisiblethings kernel: [ 0.573845] ACPI: Sleep Button [SLPB]
Mar 13 03:58:10 invisiblethings kernel: [ 0.573869] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2
Mar 13 03:58:10 invisiblethings kernel: [ 0.573870] ACPI: Power Button [PWRF]
Mar 13 03:58:10 invisiblethings kernel: [ 0.574359] thermal LNXTHERM:00: registered as thermal_zone0
Mar 13 03:58:10 invisiblethings kernel: [ 0.574361] ACPI: Thermal Zone [TZ00] (28 C)
Mar 13 03:58:10 invisiblethings kernel: [ 0.574484] thermal LNXTHERM:01: registered as thermal_zone1
Mar 13 03:58:10 invisiblethings kernel: [ 0.574485] ACPI: Thermal Zone [TZ01] (30 C)
Mar 13 03:58:10 invisiblethings kernel: [ 0.574526] GHES: HEST is not enabled!
Mar 13 03:58:10 invisiblethings kernel: [ 0.574594] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
Mar 13 03:58:10 invisiblethings kernel: [ 0.575704] Linux agpgart interface v0.103
Mar 13 03:58:10 invisiblethings kernel: [ 0.644602] tpm_tis 00:05: 1.2 TPM (device-id 0xB, rev-id 16)
Mar 13 03:58:10 invisiblethings kernel: [ 0.946727] brd: module loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.947252] loop: module loaded
Mar 13 03:58:10 invisiblethings kernel: [ 0.947379] libphy: Fixed MDIO Bus: probed
Mar 13 03:58:10 invisiblethings kernel: [ 0.947382] tun: Universal TUN/TAP device driver, 1.6
Mar 13 03:58:10 invisiblethings kernel: [ 0.947382] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Mar 13 03:58:10 invisiblethings kernel: [ 0.947412] PPP generic driver version 2.4.2
Mar 13 03:58:10 invisiblethings kernel: [ 0.947533] xhci_hcd 0000:00:14.0: xHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.947538] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1
Mar 13 03:58:10 invisiblethings kernel: [ 0.948604] xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x100 quirks 0x00009810
Mar 13 03:58:10 invisiblethings kernel: [ 0.948611] xhci_hcd 0000:00:14.0: cache line size of 64 is not supported
Mar 13 03:58:10 invisiblethings kernel: [ 0.948675] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 03:58:10 invisiblethings kernel: [ 0.948677] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 03:58:10 invisiblethings kernel: [ 0.948678] usb usb1: Product: xHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.948679] usb usb1: Manufacturer: Linux 4.2.0-30-generic xhci-hcd
Mar 13 03:58:10 invisiblethings kernel: [ 0.948680] usb usb1: SerialNumber: 0000:00:14.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.948755] hub 1-0:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 0.948765] hub 1-0:1.0: 10 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 0.950401] xhci_hcd 0000:00:14.0: xHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.950404] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2
Mar 13 03:58:10 invisiblethings kernel: [ 0.950425] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
Mar 13 03:58:10 invisiblethings kernel: [ 0.950426] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 03:58:10 invisiblethings kernel: [ 0.950427] usb usb2: Product: xHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.950428] usb usb2: Manufacturer: Linux 4.2.0-30-generic xhci-hcd
Mar 13 03:58:10 invisiblethings kernel: [ 0.950428] usb usb2: SerialNumber: 0000:00:14.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.950492] hub 2-0:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 0.950496] hub 2-0:1.0: 2 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 0.950902] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.950906] ehci-pci: EHCI PCI platform driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.950967] ehci-pci 0000:00:1a.0: EHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.950970] ehci-pci 0000:00:1a.0: new USB bus registered, assigned bus number 3
Mar 13 03:58:10 invisiblethings kernel: [ 0.950979] ehci-pci 0000:00:1a.0: debug port 2
Mar 13 03:58:10 invisiblethings kernel: [ 0.954893] ehci-pci 0000:00:1a.0: cache line size of 64 is not supported
Mar 13 03:58:10 invisiblethings kernel: [ 0.954899] ehci-pci 0000:00:1a.0: irq 16, io mem 0xf7d13000
Mar 13 03:58:10 invisiblethings kernel: [ 0.968819] ehci-pci 0000:00:1a.0: USB 2.0 started, EHCI 1.00
Mar 13 03:58:10 invisiblethings kernel: [ 0.968847] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 03:58:10 invisiblethings kernel: [ 0.968849] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 03:58:10 invisiblethings kernel: [ 0.968850] usb usb3: Product: EHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.968851] usb usb3: Manufacturer: Linux 4.2.0-30-generic ehci_hcd
Mar 13 03:58:10 invisiblethings kernel: [ 0.968851] usb usb3: SerialNumber: 0000:00:1a.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.968971] hub 3-0:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 0.968975] hub 3-0:1.0: 2 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 0.969111] ehci-pci 0000:00:1d.0: EHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.969114] ehci-pci 0000:00:1d.0: new USB bus registered, assigned bus number 4
Mar 13 03:58:10 invisiblethings kernel: [ 0.969124] ehci-pci 0000:00:1d.0: debug port 2
Mar 13 03:58:10 invisiblethings kernel: [ 0.973036] ehci-pci 0000:00:1d.0: cache line size of 64 is not supported
Mar 13 03:58:10 invisiblethings kernel: [ 0.973043] ehci-pci 0000:00:1d.0: irq 23, io mem 0xf7d12000
Mar 13 03:58:10 invisiblethings kernel: [ 0.984866] ehci-pci 0000:00:1d.0: USB 2.0 started, EHCI 1.00
Mar 13 03:58:10 invisiblethings kernel: [ 0.984896] usb usb4: New USB device found, idVendor=1d6b, idProduct=0002
Mar 13 03:58:10 invisiblethings kernel: [ 0.984898] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
Mar 13 03:58:10 invisiblethings kernel: [ 0.984899] usb usb4: Product: EHCI Host Controller
Mar 13 03:58:10 invisiblethings kernel: [ 0.984899] usb usb4: Manufacturer: Linux 4.2.0-30-generic ehci_hcd
Mar 13 03:58:10 invisiblethings kernel: [ 0.984900] usb usb4: SerialNumber: 0000:00:1d.0
Mar 13 03:58:10 invisiblethings kernel: [ 0.985020] hub 4-0:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 0.985023] hub 4-0:1.0: 2 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 0.985103] ehci-platform: EHCI generic platform driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.985112] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.985115] ohci-pci: OHCI PCI platform driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.985122] ohci-platform: OHCI generic platform driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.985128] uhci_hcd: USB Universal Host Controller Interface driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.985161] i8042: PNP: No PS/2 controller found. Probing ports directly.
Mar 13 03:58:10 invisiblethings kernel: [ 0.985565] serio: i8042 KBD port at 0x60,0x64 irq 1
Mar 13 03:58:10 invisiblethings kernel: [ 0.985569] serio: i8042 AUX port at 0x60,0x64 irq 12
Mar 13 03:58:10 invisiblethings kernel: [ 0.985796] mousedev: PS/2 mouse device common for all mice
Mar 13 03:58:10 invisiblethings kernel: [ 0.985991] rtc_cmos 00:01: RTC can wake from S4
Mar 13 03:58:10 invisiblethings kernel: [ 0.986107] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
Mar 13 03:58:10 invisiblethings kernel: [ 0.986129] rtc_cmos 00:01: alarms up to one month, y3k, 242 bytes nvram, hpet irqs
Mar 13 03:58:10 invisiblethings kernel: [ 0.986135] i2c /dev entries driver
Mar 13 03:58:10 invisiblethings kernel: [ 0.986186] device-mapper: uevent: version 1.0.3
Mar 13 03:58:10 invisiblethings kernel: [ 0.986235] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com
Mar 13 03:58:10 invisiblethings kernel: [ 0.986249] Intel P-state driver initializing.
Mar 13 03:58:10 invisiblethings kernel: [ 0.986345] ledtrig-cpu: registered to indicate activity on CPUs
Mar 13 03:58:10 invisiblethings kernel: [ 0.986665] PCCT header not found.
Mar 13 03:58:10 invisiblethings kernel: [ 0.987173] NET: Registered protocol family 10
Mar 13 03:58:10 invisiblethings kernel: [ 0.987584] NET: Registered protocol family 17
Mar 13 03:58:10 invisiblethings kernel: [ 0.987622] Key type dns_resolver registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.988364] Loading compiled-in X.509 certificates
Mar 13 03:58:10 invisiblethings kernel: [ 0.990663] Loaded X.509 cert 'Build time autogenerated kernel key: aa46912a20e4e17b1e4a6ccc08bd3c70d4d8f464'
Mar 13 03:58:10 invisiblethings kernel: [ 0.990692] registered taskstats version 1
Mar 13 03:58:10 invisiblethings kernel: [ 0.990749] zswap: loading zswap
Mar 13 03:58:10 invisiblethings kernel: [ 0.990753] zswap: using zbud pool
Mar 13 03:58:10 invisiblethings kernel: [ 0.990763] zswap: using lzo compressor
Mar 13 03:58:10 invisiblethings kernel: [ 0.993517] Key type trusted registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.995565] Key type encrypted registered
Mar 13 03:58:10 invisiblethings kernel: [ 0.995570] AppArmor: AppArmor sha1 policy hashing enabled
Mar 13 03:58:10 invisiblethings kernel: [ 1.261087] usb 1-1: new low-speed USB device number 2 using xhci_hcd
Mar 13 03:58:10 invisiblethings kernel: [ 1.281103] usb 3-1: new high-speed USB device number 2 using ehci-pci
Mar 13 03:58:10 invisiblethings kernel: [ 1.297115] usb 4-1: new high-speed USB device number 2 using ehci-pci
Mar 13 03:58:10 invisiblethings kernel: [ 1.394391] usb 1-1: New USB device found, idVendor=0461, idProduct=0010
Mar 13 03:58:10 invisiblethings kernel: [ 1.394393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Mar 13 03:58:10 invisiblethings kernel: [ 1.394394] usb 1-1: Product: USB Keyboard
Mar 13 03:58:10 invisiblethings kernel: [ 1.394395] usb 1-1: Manufacturer: NOVATEK
Mar 13 03:58:10 invisiblethings kernel: [ 1.394463] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 03:58:10 invisiblethings kernel: [ 1.394465] usb 1-1: ep 0x82 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 03:58:10 invisiblethings kernel: [ 1.413612] usb 3-1: New USB device found, idVendor=8087, idProduct=8008
Mar 13 03:58:10 invisiblethings kernel: [ 1.413614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Mar 13 03:58:10 invisiblethings kernel: [ 1.413892] hub 3-1:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 1.413989] hub 3-1:1.0: 4 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 1.429604] usb 4-1: New USB device found, idVendor=8087, idProduct=8000
Mar 13 03:58:10 invisiblethings kernel: [ 1.429606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Mar 13 03:58:10 invisiblethings kernel: [ 1.429873] hub 4-1:1.0: USB hub found
Mar 13 03:58:10 invisiblethings kernel: [ 1.429978] hub 4-1:1.0: 6 ports detected
Mar 13 03:58:10 invisiblethings kernel: [ 1.561324] usb 1-2: new low-speed USB device number 3 using xhci_hcd
Mar 13 03:58:10 invisiblethings kernel: [ 1.569338] tsc: Refined TSC clocksource calibration: 3192.607 MHz
Mar 13 03:58:10 invisiblethings kernel: [ 1.569340] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2e0501eb3d1, max_idle_ns: 440795254769 ns
Mar 13 03:58:10 invisiblethings kernel: [ 1.692779] usb 1-2: New USB device found, idVendor=03f0, idProduct=094a
Mar 13 03:58:10 invisiblethings kernel: [ 1.692781] usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Mar 13 03:58:10 invisiblethings kernel: [ 1.692782] usb 1-2: Product: HP USB Optical Mouse
Mar 13 03:58:10 invisiblethings kernel: [ 1.692783] usb 1-2: Manufacturer: PixArt
Mar 13 03:58:10 invisiblethings kernel: [ 1.692901] usb 1-2: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 03:58:10 invisiblethings kernel: [ 1.701498] evm: HMAC attrs: 0x1
Mar 13 03:58:10 invisiblethings kernel: [ 1.701824] Magic number: 8:58:915
Mar 13 03:58:10 invisiblethings kernel: [ 1.701929] rtc_cmos 00:01: setting system clock to 2016-03-13 02:56:57 UTC (1457837817)
Mar 13 03:58:10 invisiblethings kernel: [ 1.701969] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
Mar 13 03:58:10 invisiblethings kernel: [ 1.701969] EDD information not available.
Mar 13 03:58:10 invisiblethings kernel: [ 1.702025] PM: Hibernation image not present or could not be loaded.
Mar 13 03:58:10 invisiblethings kernel: [ 1.702310] Freeing unused kernel memory: 1464K (ffffffff81d37000 - ffffffff81ea5000)
Mar 13 03:58:10 invisiblethings kernel: [ 1.702311] Write protecting the kernel read-only data: 12288k
Mar 13 03:58:10 invisiblethings kernel: [ 1.702420] Freeing unused kernel memory: 20K (ffff8800017fb000 - ffff880001800000)
Mar 13 03:58:10 invisiblethings kernel: [ 1.702487] Freeing unused kernel memory: 292K (ffff880001bb7000 - ffff880001c00000)
Mar 13 03:58:10 invisiblethings kernel: [ 1.710008] random: systemd-udevd urandom read with 4 bits of entropy available
Mar 13 03:58:10 invisiblethings kernel: [ 1.741004] [drm] Initialized drm 1.1.0 20060810
Mar 13 03:58:10 invisiblethings kernel: [ 1.756309] wmi: Mapper loaded
Mar 13 03:58:10 invisiblethings kernel: [ 1.757477] [drm] Memory usable by graphics device = 2048M
Mar 13 03:58:10 invisiblethings kernel: [ 1.757480] checking generic (e0000000 7f0000) vs hw (e0000000 10000000)
Mar 13 03:58:10 invisiblethings kernel: [ 1.757481] fb: switching to inteldrmfb from VESA VGA
Mar 13 03:58:10 invisiblethings kernel: [ 1.757502] Console: switching to colour dummy device 80x25
Mar 13 03:58:10 invisiblethings kernel: [ 1.757558] [drm] Replacing VGA console driver
Mar 13 03:58:10 invisiblethings kernel: [ 1.760737] hidraw: raw HID events driver (C) Jiri Kosina
Mar 13 03:58:10 invisiblethings kernel: [ 1.765044] r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded
Mar 13 03:58:10 invisiblethings kernel: [ 1.765052] r8169 0000:03:00.0: can't disable ASPM; OS doesn't have ASPM control
Mar 13 03:58:10 invisiblethings kernel: [ 1.768663] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
Mar 13 03:58:10 invisiblethings kernel: [ 1.768665] [drm] Driver supports precise vblank timestamp query.
Mar 13 03:58:10 invisiblethings kernel: [ 1.769056] vgaarb: device changed decodes: PCI:0000:00:02.0,olddecodes=io+mem,decodes=io+mem:owns=io+mem
Mar 13 03:58:10 invisiblethings kernel: [ 1.770373] r8169 0000:03:00.0 eth0: RTL8168g/8111g at 0xffffc9000001e000, 48:0f:cf:36:52:2a, XID 0c000800 IRQ 29
Mar 13 03:58:10 invisiblethings kernel: [ 1.770375] r8169 0000:03:00.0 eth0: jumbo features [frames: 9200 bytes, tx checksumming: ko]
Mar 13 03:58:10 invisiblethings kernel: [ 1.774867] usbcore: registered new interface driver usbhid
Mar 13 03:58:10 invisiblethings kernel: [ 1.774868] usbhid: USB HID core driver
Mar 13 03:58:10 invisiblethings kernel: [ 1.784546] ACPI: Video Device [GFX0] (multi-head: yes rom: no post: no)
Mar 13 03:58:10 invisiblethings kernel: [ 1.784693] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input6
Mar 13 03:58:10 invisiblethings kernel: [ 1.784754] [drm] Initialized i915 1.6.0 20150522 for 0000:00:02.0 on minor 0
Mar 13 03:58:10 invisiblethings kernel: [ 1.784774] ahci 0000:00:1f.2: version 3.0
Mar 13 03:58:10 invisiblethings kernel: [ 1.784906] ahci 0000:00:1f.2: AHCI 0001.0300 32 slots 4 ports 6 Gbps 0x11 impl SATA mode
Mar 13 03:58:10 invisiblethings kernel: [ 1.784908] ahci 0000:00:1f.2: flags: 64bit ncq pm led clo pio slum part ems
Mar 13 03:58:10 invisiblethings kernel: [ 1.789894] scsi host0: ahci
Mar 13 03:58:10 invisiblethings kernel: [ 1.789976] scsi host1: ahci
Mar 13 03:58:10 invisiblethings kernel: [ 1.790042] scsi host2: ahci
Mar 13 03:58:10 invisiblethings kernel: [ 1.790093] scsi host3: ahci
Mar 13 03:58:10 invisiblethings kernel: [ 1.790142] scsi host4: ahci
Mar 13 03:58:10 invisiblethings kernel: [ 1.790169] ata1: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11100 irq 30
Mar 13 03:58:10 invisiblethings kernel: [ 1.790170] ata2: DUMMY
Mar 13 03:58:10 invisiblethings kernel: [ 1.790171] ata3: DUMMY
Mar 13 03:58:10 invisiblethings kernel: [ 1.790171] ata4: DUMMY
Mar 13 03:58:10 invisiblethings kernel: [ 1.790173] ata5: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11300 irq 30
Mar 13 03:58:10 invisiblethings kernel: [ 1.807461] fbcon: inteldrmfb (fb0) is primary device
Mar 13 03:58:10 invisiblethings kernel: [ 1.807513] Console: switching to colour frame buffer device 240x67
Mar 13 03:58:10 invisiblethings kernel: [ 1.807531] i915 0000:00:02.0: fb0: inteldrmfb frame buffer device
Mar 13 03:58:10 invisiblethings kernel: [ 1.807532] i915 0000:00:02.0: registered panic notifier
Mar 13 03:58:10 invisiblethings kernel: [ 1.820671] r8169 0000:03:00.0 enp3s0: renamed from eth0
Mar 13 03:58:10 invisiblethings kernel: [ 1.829819] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:0461:0010.0001/input/input7
Mar 13 03:58:10 invisiblethings kernel: [ 1.885738] hid-generic 0003:0461:0010.0001: input,hidraw0: USB HID v1.10 Keyboard [NOVATEK USB Keyboard] on usb-0000:00:14.0-1/input0
Mar 13 03:58:10 invisiblethings kernel: [ 1.886544] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.1/0003:0461:0010.0002/input/input8
Mar 13 03:58:10 invisiblethings kernel: [ 1.941772] hid-generic 0003:0461:0010.0002: input,hidraw1: USB HID v1.10 Device [NOVATEK USB Keyboard] on usb-0000:00:14.0-1/input1
Mar 13 03:58:10 invisiblethings kernel: [ 1.941840] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2:1.0/0003:03F0:094A.0003/input/input9
Mar 13 03:58:10 invisiblethings kernel: [ 1.941892] hid-generic 0003:03F0:094A.0003: input,hidraw2: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-2/input0
Mar 13 03:58:10 invisiblethings kernel: [ 2.109781] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
Mar 13 03:58:10 invisiblethings kernel: [ 2.111081] ata1.00: ATA-8: WDC WD5000AAKX-60U6AA0, 18.01H18, max UDMA/100
Mar 13 03:58:10 invisiblethings kernel: [ 2.111083] ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA
Mar 13 03:58:10 invisiblethings kernel: [ 2.112246] ata1.00: configured for UDMA/100
Mar 13 03:58:10 invisiblethings kernel: [ 2.112401] scsi 0:0:0:0: Direct-Access ATA WDC WD5000AAKX-6 1H18 PQ: 0 ANSI: 5
Mar 13 03:58:10 invisiblethings kernel: [ 2.112625] sd 0:0:0:0: Attached scsi generic sg0 type 0
Mar 13 03:58:10 invisiblethings kernel: [ 2.112631] sd 0:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/465 GiB)
Mar 13 03:58:10 invisiblethings kernel: [ 2.112663] sd 0:0:0:0: [sda] Write Protect is off
Mar 13 03:58:10 invisiblethings kernel: [ 2.112664] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
Mar 13 03:58:10 invisiblethings kernel: [ 2.112676] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
Mar 13 03:58:10 invisiblethings kernel: [ 2.113777] ata5: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
Mar 13 03:58:10 invisiblethings kernel: [ 2.117004] ata5.00: ATAPI: hp DVD A DH16AFSH, DHH6, max UDMA/133
Mar 13 03:58:10 invisiblethings kernel: [ 2.118021] ata5.00: configured for UDMA/133
Mar 13 03:58:10 invisiblethings kernel: [ 2.120355] scsi 4:0:0:0: CD-ROM hp DVD A DH16AFSH DHH6 PQ: 0 ANSI: 5
Mar 13 03:58:10 invisiblethings kernel: [ 2.128268] sda: sda1 sda2 < sda5 >
Mar 13 03:58:10 invisiblethings kernel: [ 2.128675] sd 0:0:0:0: [sda] Attached SCSI disk
Mar 13 03:58:10 invisiblethings kernel: [ 2.139839] sr 4:0:0:0: [sr0] scsi3-mmc drive: 40x/40x writer dvd-ram cd/rw xa/form2 cdda tray
Mar 13 03:58:10 invisiblethings kernel: [ 2.139842] cdrom: Uniform CD-ROM driver Revision: 3.20
Mar 13 03:58:10 invisiblethings kernel: [ 2.139915] sr 4:0:0:0: Attached scsi CD-ROM sr0
Mar 13 03:58:10 invisiblethings kernel: [ 2.139945] sr 4:0:0:0: Attached scsi generic sg1 type 5
Mar 13 03:58:10 invisiblethings kernel: [ 2.570275] clocksource: Switched to clocksource tsc
Mar 13 03:58:10 invisiblethings kernel: [ 36.921912] random: nonblocking pool is initialized
Mar 13 03:58:10 invisiblethings kernel: [ 47.555967] NET: Registered protocol family 38
Mar 13 03:58:10 invisiblethings kernel: [ 60.001561] EXT4-fs (dm-1): mounted filesystem with ordered data mode. Opts: (null)
Mar 13 03:58:10 invisiblethings kernel: [ 62.055235] usb 1-2: USB disconnect, device number 3
Mar 13 03:58:10 invisiblethings kernel: [ 62.244031] lp: driver loaded but no devices found
Mar 13 03:58:10 invisiblethings kernel: [ 62.246257] ppdev: user-space parallel port driver
Mar 13 03:58:10 invisiblethings kernel: [ 63.158618] EXT4-fs (dm-1): re-mounted. Opts: errors=remount-ro
Mar 13 03:58:10 invisiblethings kernel: [ 63.530160] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
Mar 13 03:58:10 invisiblethings kernel: [ 63.559316] usb 1-2: new low-speed USB device number 4 using xhci_hcd
Mar 13 03:58:10 invisiblethings kernel: [ 63.690817] usb 1-2: New USB device found, idVendor=03f0, idProduct=094a
Mar 13 03:58:10 invisiblethings kernel: [ 63.690820] usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Mar 13 03:58:10 invisiblethings kernel: [ 63.690821] usb 1-2: Product: HP USB Optical Mouse
Mar 13 03:58:10 invisiblethings kernel: [ 63.690822] usb 1-2: Manufacturer: PixArt
Mar 13 03:58:10 invisiblethings kernel: [ 63.690889] usb 1-2: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Mar 13 03:58:10 invisiblethings kernel: [ 63.693407] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2:1.0/0003:03F0:094A.0004/input/input10
Mar 13 03:58:10 invisiblethings kernel: [ 63.693475] hid-generic 0003:03F0:094A.0004: input,hidraw2: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-2/input0
Mar 13 03:58:10 invisiblethings kernel: [ 64.005564] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005569] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005576] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005606] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005609] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005612] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005634] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005637] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005640] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005681] input: HP WMI hotkeys as /devices/virtual/input/input11
Mar 13 03:58:10 invisiblethings kernel: [ 64.005774] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005776] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005780] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005801] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005803] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.005806] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Mar 13 03:58:10 invisiblethings kernel: [ 64.196183] kvm: disabled by bios
Mar 13 03:58:10 invisiblethings kernel: [ 64.228427] kvm: disabled by bios
Mar 13 03:58:10 invisiblethings kernel: [ 64.672693] intel_rapl: Found RAPL domain package
Mar 13 03:58:10 invisiblethings kernel: [ 64.672695] intel_rapl: Found RAPL domain core
Mar 13 03:58:10 invisiblethings kernel: [ 64.672696] intel_rapl: Found RAPL domain uncore
Mar 13 03:58:10 invisiblethings kernel: [ 64.672697] intel_rapl: Found RAPL domain dram
Mar 13 03:58:10 invisiblethings kernel: [ 64.672699] intel_rapl: RAPL package 0 domain package locked by BIOS
Mar 13 03:58:10 invisiblethings kernel: [ 64.672701] intel_rapl: RAPL package 0 domain dram locked by BIOS
Mar 13 03:58:10 invisiblethings kernel: [ 67.232775] EXT4-fs (sda1): mounting ext2 file system using the ext4 subsystem
Mar 13 03:58:10 invisiblethings kernel: [ 67.286760] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null)
Mar 13 03:58:10 invisiblethings kernel: [ 70.882727] Adding 4115964k swap on /dev/mapper/cryptswap1. Priority:-1 extents:1 across:4115964k FS
Mar 13 03:58:10 invisiblethings kernel: [ 70.928096] audit: type=1400 audit(1457837886.663:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 70.928102] audit: type=1400 audit(1457837886.663:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="chromium" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 70.979581] audit: type=1400 audit(1457837886.719:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 70.979585] audit: type=1400 audit(1457837886.719:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 70.979588] audit: type=1400 audit(1457837886.719:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 70.979591] audit: type=1400 audit(1457837886.719:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 71.022635] audit: type=1400 audit(1457837886.759:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 71.022642] audit: type=1400 audit(1457837886.759:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 71.022645] audit: type=1400 audit(1457837886.759:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince-previewer" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 71.022648] audit: type=1400 audit(1457837886.759:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=590 comm="apparmor_parser"
Mar 13 03:58:10 invisiblethings kernel: [ 71.674959] cgroup: new mount options do not match the existing superblock, will be ignored
Mar 13 03:58:13 invisiblethings kernel: [ 77.862865] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
Mar 13 03:58:13 invisiblethings kernel: [ 78.065572] r8169 0000:03:00.0 enp3s0: link down
Mar 13 03:58:13 invisiblethings kernel: [ 78.065591] r8169 0000:03:00.0 enp3s0: link down
Mar 13 03:58:13 invisiblethings kernel: [ 78.065615] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
Mar 13 03:58:15 invisiblethings kernel: [ 80.140562] r8169 0000:03:00.0 enp3s0: link up
Mar 13 03:58:15 invisiblethings kernel: [ 80.140571] IPv6: ADDRCONF(NETDEV_CHANGE): enp3s0: link becomes ready
Mar 13 03:58:45 invisiblethings gnome-session[1450]: Entering running state
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuset
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpu
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Initializing cgroup subsys cpuacct
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Linux version 4.2.0-30-generic (buildd@lgw01-60) (gcc version 5.2.1 20151010 (Ubuntu 5.2.1-22ubuntu2) ) #36-Ubuntu SMP Fri Feb 26 00:58:07 UTC 2016 (Ubuntu 4.2.0-30.36-generic 4.2.8-ckt3)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-4.2.0-30-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] KERNEL supported cpus:
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Intel GenuineIntel
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] AMD AuthenticAMD
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Centaur CentaurHauls
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers'
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers'
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] x86/fpu: Enabled xstate features 0x3, context size is 0x240 bytes, using 'standard' format.
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] x86/fpu: Using 'eager' FPU context switches.
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: BIOS-provided physical RAM map:
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000c8b3bfff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b3c000-0x00000000c8b42fff] ACPI NVS
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c8b43000-0x00000000c9601fff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c9602000-0x00000000c98c2fff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000c98c3000-0x00000000dbaf6fff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbaf7000-0x00000000dbb5ffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb60000-0x00000000dbb89fff] ACPI data
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbb8a000-0x00000000dbceffff] ACPI NVS
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbcf0000-0x00000000dbffefff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dbfff000-0x00000000dbffffff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000dd000000-0x00000000df1fffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000f8000000-0x00000000fbffffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed00000-0x00000000fed03fff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000011fdfffff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] NX (Execute Disable) protection: active
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] SMBIOS 2.8 present.
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] DMI: Hewlett-Packard HP 280 G1 MT/2B34, BIOS 80.14 09/28/2015
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0x11fe00 max_arch_pfn = 0x400000000
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] MTRR default type: uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] MTRR fixed ranges enabled:
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 00000-9FFFF write-back
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] A0000-BFFFF uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] C0000-CFFFF write-protect
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] D0000-E7FFF uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] E8000-FFFFF write-protect
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] MTRR variable ranges enabled:
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 0 base 0000000000 mask 7F00000000 write-back
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 1 base 0100000000 mask 7FE0000000 write-back
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 2 base 00E0000000 mask 7FE0000000 uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 3 base 00DE000000 mask 7FFE000000 uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 4 base 00DD000000 mask 7FFF000000 uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 5 base 011FE00000 mask 7FFFE00000 uncachable
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 6 disabled
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 7 disabled
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 8 disabled
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] 9 disabled
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] original variable MTRRs
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 4GB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 1, base: 4GB, range: 512MB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 2, base: 3584MB, range: 512MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 3, base: 3552MB, range: 32MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 4, base: 3536MB, range: 16MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 5, base: 4606MB, range: 2MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] total RAM covered: 4046M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Found optimal setting for mtrr clean up
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] gran_size: 64K chunk_size: 64M num_reg: 7 lose cover RAM: 0G
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] New variable MTRRs
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 1, base: 2GB, range: 1GB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 2, base: 3GB, range: 512MB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 3, base: 3536MB, range: 16MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 4, base: 3552MB, range: 32MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 5, base: 4GB, range: 512MB, type WB
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] reg 6, base: 4606MB, range: 2MB, type UC
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: update [mem 0xdd000000-0xffffffff] usable ==> reserved
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] e820: last_pfn = 0xdc000 max_arch_pfn = 0x400000000
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] found SMP MP-table at [mem 0x000fd7c0-0x000fd7cf] mapped at [ffff8800000fd7c0]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Scanning 1 areas for low memory corruption
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] Using GB pages for direct mapping
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x00000000-0x000fffff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff1000, 0x01ff1fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff2000, 0x01ff2fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff3000, 0x01ff3fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x11fc00000-0x11fdfffff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x11fc00000-0x11fdfffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff4000, 0x01ff4fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x100000000-0x11fbfffff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x100000000-0x11fbfffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc0000000-0xc8b3bfff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc0000000-0xc89fffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc8a00000-0xc8b3bfff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff5000, 0x01ff5fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] BRK [0x01ff6000, 0x01ff6fff] PGTABLE
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc8b43000-0xc9601fff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc8b43000-0xc8bfffff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc8c00000-0xc95fffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc9600000-0xc9601fff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xc98c3000-0xdbaf6fff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc98c3000-0xc99fffff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xc9a00000-0xdb9fffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xdba00000-0xdbaf6fff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0xdbfff000-0xdbffffff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0xdbfff000-0xdbffffff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] init_memory_mapping: [mem 0x00100000-0xbfffffff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x00100000-0x001fffff] page 4k
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x00200000-0x3fffffff] page 2M
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] [mem 0x40000000-0xbfffffff] page 1G
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] RAMDISK: [mem 0x33bd2000-0x35de0fff]
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: Early table checksum verification disabled
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: RSDP 0x00000000000F0490 000024 (v02 HPQOEM)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: XSDT 0x00000000DBB69088 000094 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: FACP 0x00000000DBB81FA0 00010C (v05 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: DSDT 0x00000000DBB691B0 018DEC (v02 HPQOEM SLIC-CPC 00008014 INTL 20120711)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: FACS 0x00000000DBCEFF80 000040
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: APIC 0x00000000DBB820B0 000062 (v03 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: FPDT 0x00000000DBB82118 000044 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: FIDT 0x00000000DBB82160 00009C (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: TCPA 0x00000000DBB82200 000032 (v02 HPQOEM SLIC-CPC 00000001 MSFT 01000013)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82238 000C7D (v02 HPQOEM SLIC-CPC 00001000 INTL 20120711)
Mar 13 10:46:47 invisiblethings kernel: [ 0.000000] ACPI: SSDT 0x00000000DBB82EB8 000539 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
|
|
14.03.2016, 11:15
| #10 | |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Kern.log 3 Zitat:
|
|
15.03.2016, 09:45
| #11 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Also ich habe in deinen Linux-Auszügen keine Auffälligkeiten gefunden. Vielleicht kannst du mal das rauskopieren, was du als auffällig ansiehst. Die Meldungen z.B. unter Tiger sind ziemlich normal. Auch AppArmor meckert gerne mal rum. Und wenn deine Fritzbox von innen angegriffen wird dann wohl eher von der Malware auf deinem Windows-Rechner. Daher: - falls die Malware tatsächlich im BIOS verankert ist dort entsprechend bereinigen oder nur noch Linux nutzen - alle Passwörter ändern - Fritzbox zurücksetzen und neues Passwort vergeben - Windows neu installieren |
|
15.03.2016, 10:08
| #12 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Super, vielen Dank! Firmware-Test: fwts Habe der Übersichtlichkeit wegen den Log gekürzt und nach Fehlermeldungen selektiert Code:
ATTFilter syntaxcheck: Re-assemble DSDT and SSDTs to find syntax errors and warnings.
--------------------------------------------------------------------------------
Test 1 of 1: Disassemble and reassemble DSDT and SSDTs.
Checking ACPI table DSDT (#0)
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 6740
Line | AML source
--------------------------------------------------------------------------------
06737| }
06738| }
06739|
06740| Zero
| ^
| Error 6126: syntax error, unexpected PARSEOP_ZERO
06741| Zero
06742| Zero
06743| Zero
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 10817
Line | AML source
--------------------------------------------------------------------------------
10814| {
10815| Return (MDBG) /* External reference */
10816| Arg0
10817| }
| ^
| Error 6126: syntax error, unexpected '}'
10818|
10819| Return (Zero)
10820| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 20852
Line | AML source
--------------------------------------------------------------------------------
20849| /* 1458 */ 0x5D, 0x82, 0x06, 0xC3, 0x47, 0xE7, 0xC1, 0x60, /* ]...G..` */
20850| /* 1460 */ 0xEE, 0x47, 0x1E, 0x9D, 0x00, 0x35, 0x16, 0x9E, /* .G...5.. */
20851| /* 1468 */ 0x8A, 0x44, 0x47, 0x6E, 0x9F, 0xAE, 0xDE, 0xAE, /* .DGn.... */
20852| /* 1470 */ 0x7C, 0x59, 0xF0, 0x85, 0xC1, 0x17, 0x2A, 0x2F, /* |Y....*/ */
| ^
| Error 6126: syntax error, unexpected PARSEOP_EXP_MULTIPLY, expecting '}'
20853| /* 1478 */ 0xE0, 0xC1, 0x1B, 0xC6, 0xF9, 0xC8, 0x87, 0x2A, /* .......* */
20854| /* 1480 */ 0xFF, 0xFF, 0xA1, 0xE2, 0x04, 0x7E, 0x25, 0x78, /* .....~%x */
20855| /* 1488 */ 0xD7, 0x0A, 0x11, 0xCC, 0xB0, 0x8F, 0x01, 0x8F, /* ........ */
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 21193
Line | AML source
--------------------------------------------------------------------------------
21190| Method (GBFE, 3, NotSerialized)
21191| {
21192| CreateByteField (Arg0, Arg1, TIDX)
21193| Store (TIDX, Arg2)
| ^
| Error 6126: syntax error, unexpected PARSEOP_STORE
21194| }
21195|
21196| Method (PBFE, 3, NotSerialized)
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 25106
Line | AML source
--------------------------------------------------------------------------------
25103| }
25104| }
25105|
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] SyntaxCheckIASLCompilerAborted: Test 1, Compilation aborted early
due to a parser detected syntax error.
ADVICE: Some subsequent errors may not be detected because the compiler had to
terminate prematurely. If the compiler did not abort early then potentially
correct code may parse incorrectly producing some or many false positive errors.
Table DSDT (0) reassembly: Found 5 errors, 0 warnings, 0 remarks.
Checking ACPI table SSDT (#1)
PASSED: Test 1, SSDT (1) reassembly, Found 0 errors, 0 warnings, 0 remarks.
Checking ACPI table SSDT (#2)
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 223
Line | AML source
--------------------------------------------------------------------------------
00220| 0x00000800
00221| }
00222| })
00223| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00224| {
00225| 0x80000000,
00226| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 243
Line | AML source
--------------------------------------------------------------------------------
00240| 0x80000000
00241| }
00242|
00243| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00244| {
00245| 0x80000000,
00246| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 244
Line | AML source
--------------------------------------------------------------------------------
00241| }
00242|
00243| Package (0x06)
00244| {
| ^
| Error 6126: syntax error, unexpected '{'
00245| 0x80000000,
00246| 0x80000000,
00247| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 263
Line | AML source
--------------------------------------------------------------------------------
00260| 0x80000000
00261| }
00262|
00263| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00264| {
00265| 0x80000000,
00266| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 264
Line | AML source
--------------------------------------------------------------------------------
00261| }
00262|
00263| Package (0x06)
00264| {
| ^
| Error 6126: syntax error, unexpected '{'
00265| 0x80000000,
00266| 0x80000000,
00267| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 283
Line | AML source
--------------------------------------------------------------------------------
00280| 0x80000000
00281| }
00282|
00283| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00284| {
00285| 0x80000000,
00286| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 284
Line | AML source
--------------------------------------------------------------------------------
00281| }
00282|
00283| Package (0x06)
00284| {
| ^
| Error 6126: syntax error, unexpected '{'
00285| 0x80000000,
00286| 0x80000000,
00287| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 303
Line | AML source
--------------------------------------------------------------------------------
00300| 0x80000000
00301| }
00302|
00303| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00304| {
00305| 0x80000000,
00306| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 304
Line | AML source
--------------------------------------------------------------------------------
00301| }
00302|
00303| Package (0x06)
00304| {
| ^
| Error 6126: syntax error, unexpected '{'
00305| 0x80000000,
00306| 0x80000000,
00307| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 323
Line | AML source
--------------------------------------------------------------------------------
00320| 0x80000000
00321| }
00322|
00323| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00324| {
00325| 0x80000000,
00326| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 324
Line | AML source
--------------------------------------------------------------------------------
00321| }
00322|
00323| Package (0x06)
00324| {
| ^
| Error 6126: syntax error, unexpected '{'
00325| 0x80000000,
00326| 0x80000000,
00327| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 343
Line | AML source
--------------------------------------------------------------------------------
00340| 0x80000000
00341| }
00342|
00343| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00344| {
00345| 0x80000000,
00346| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 344
Line | AML source
--------------------------------------------------------------------------------
00341| }
00342|
00343| Package (0x06)
00344| {
| ^
| Error 6126: syntax error, unexpected '{'
00345| 0x80000000,
00346| 0x80000000,
00347| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 363
Line | AML source
--------------------------------------------------------------------------------
00360| 0x80000000
00361| }
00362|
00363| Package (0x06)
| ^
| Error 6126: syntax error, unexpected PARSEOP_PACKAGE
00364| {
00365| 0x80000000,
00366| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 364
Line | AML source
--------------------------------------------------------------------------------
00361| }
00362|
00363| Package (0x06)
00364| {
| ^
| Error 6126: syntax error, unexpected '{'
00365| 0x80000000,
00366| 0x80000000,
00367| 0x80000000,
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 383
Line | AML source
--------------------------------------------------------------------------------
00380| 0x80000000
00381| }
00382|
00383| Name (PSDF, Zero)
| ^
| Error 6126: syntax error, unexpected PARSEOP_NAME
00384| Method (_PSD, 0, NotSerialized) // _PSD: Power State Dependencies
00385| {
00386| If (LNot (PSDF))
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 424
Line | AML source
--------------------------------------------------------------------------------
00421| }
00422| })
00423| }
00424| }
| ^
| Error 6126: syntax error, unexpected '}', expecting $end and premature End-Of-File
00425|
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] SyntaxCheckIASLCompilerAborted: Test 1, Compilation aborted early
due to a parser detected syntax error.
ADVICE: Some subsequent errors may not be detected because the compiler had to
terminate prematurely. If the compiler did not abort early then potentially
correct code may parse incorrectly producing some or many false positive errors.
Table SSDT (2) reassembly: Found 17 errors, 0 warnings, 0 remarks.
Checking ACPI table SSDT (#3)
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 150
Line | AML source
--------------------------------------------------------------------------------
00147|
00148| Store (CPDC (Arg0), Local0)
00149| GCAP (Local0)
00150| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00151| }
00152|
00153| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [LOW] AMLAsmASL_MSG_SERIALIZED_REQUIRED: Test 1, Assembler remark in line
160
Line | AML source
--------------------------------------------------------------------------------
00157| Return (Local0)
00158| }
00159|
00160| Method (CPDC, 1, NotSerialized)
| ^
| Remark 2120: Control Method should be made Serialized (due to creation of named objects within)
00161| {
00162| CreateDWordField (Arg0, Zero, REVS)
00163| CreateDWordField (Arg0, 0x04, SIZE)
================================================================================
ADVICE: (for Remark #2120, ASL_MSG_SERIALIZED_REQUIRED): A named object is
created inside a non-serialized method - this method should be serialized. It is
possible that one thread enters the method and blocks and then a second thread
also executes the method, ending up in two attempts to create the object and
causing a failure.
FAILED [LOW] AMLAsmUnknown: Test 1, Assembler remark in line 175
Line | AML source
--------------------------------------------------------------------------------
00172| Return (COSC (ToUUID ("4077a616-290c-47be-9ebd-d87058713953"), REVS, SIZE, Local2))
00173| }
00174|
00175| Method (COSC, 4, NotSerialized)
| ^
| Remark 2146: Method Argument is never used (Arg2)
00176| {
00177| CreateDWordField (Arg3, Zero, STS0)
00178| CreateDWordField (Arg3, 0x04, CAP0)
================================================================================
FAILED [LOW] AMLAsmASL_MSG_SERIALIZED_REQUIRED: Test 1, Assembler remark in line
175
Line | AML source
--------------------------------------------------------------------------------
00172| Return (COSC (ToUUID ("4077a616-290c-47be-9ebd-d87058713953"), REVS, SIZE, Local2))
00173| }
00174|
00175| Method (COSC, 4, NotSerialized)
| ^
| Remark 2120: Control Method should be made Serialized (due to creation of named objects within)
00176| {
00177| CreateDWordField (Arg3, Zero, STS0)
00178| CreateDWordField (Arg3, 0x04, CAP0)
================================================================================
ADVICE: (for Remark #2120, ASL_MSG_SERIALIZED_REQUIRED): A named object is
created inside a non-serialized method - this method should be serialized. It is
possible that one thread enters the method and blocks and then a second thread
also executes the method, ending up in two attempts to create the object and
causing a failure.
FAILED [LOW] AMLAsmASL_MSG_NOT_REFERENCED: Test 1, Assembler remark in line 178
Line | AML source
--------------------------------------------------------------------------------
00175| Method (COSC, 4, NotSerialized)
00176| {
00177| CreateDWordField (Arg3, Zero, STS0)
00178| CreateDWordField (Arg3, 0x04, CAP0)
| ^
| Remark 2089: Object is not referenced (Name is within method [COSC])
00179| CreateDWordField (Arg0, Zero, IID0)
00180| CreateDWordField (Arg0, 0x04, IID1)
00181| CreateDWordField (Arg0, 0x08, IID2)
================================================================================
FAILED [LOW] AMLAsmASL_MSG_SERIALIZED_REQUIRED: Test 1, Assembler remark in line
204
Line | AML source
--------------------------------------------------------------------------------
00201| Return (Arg3)
00202| }
00203|
00204| Method (GCAP, 1, NotSerialized)
| ^
| Remark 2120: Control Method should be made Serialized (due to creation of named objects within)
00205| {
00206| CreateDWordField (Arg0, Zero, STS0)
00207| CreateDWordField (Arg0, 0x04, CAP0)
================================================================================
ADVICE: (for Remark #2120, ASL_MSG_SERIALIZED_REQUIRED): A named object is
created inside a non-serialized method - this method should be serialized. It is
possible that one thread enters the method and blocks and then a second thread
also executes the method, ending up in two attempts to create the object and
causing a failure.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 243
Line | AML source
--------------------------------------------------------------------------------
00240| {
00241| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00242| GCAP (Local0)
00243| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00244| }
00245|
00246| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [LOW] AMLAsmASL_MSG_SERIALIZED_REQUIRED: Test 1, Assembler remark in line
283
Line | AML source
--------------------------------------------------------------------------------
00280| Return (Zero)
00281| }
00282|
00283| Method (APCT, 0, NotSerialized)
| ^
| Remark 2120: Control Method should be made Serialized (due to creation of named objects within)
00284| {
00285| If (LAnd (And (CFGD, 0x7A), LNot (And (SDTL, 0x20))))
00286| {
================================================================================
ADVICE: (for Remark #2120, ASL_MSG_SERIALIZED_REQUIRED): A named object is
created inside a non-serialized method - this method should be serialized. It is
possible that one thread enters the method and blocks and then a second thread
also executes the method, ending up in two attempts to create the object and
causing a failure.
FAILED [LOW] AMLAsmASL_MSG_SERIALIZED_REQUIRED: Test 1, Assembler remark in line
293
Line | AML source
--------------------------------------------------------------------------------
00290| }
00291| }
00292|
00293| Method (APPT, 0, NotSerialized)
| ^
| Remark 2120: Control Method should be made Serialized (due to creation of named objects within)
00294| {
00295| If (LAnd (And (CFGD, One), LNot (And (SDTL, 0x10))))
00296| {
================================================================================
ADVICE: (for Remark #2120, ASL_MSG_SERIALIZED_REQUIRED): A named object is
created inside a non-serialized method - this method should be serialized. It is
possible that one thread enters the method and blocks and then a second thread
also executes the method, ending up in two attempts to create the object and
causing a failure.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 310
Line | AML source
--------------------------------------------------------------------------------
00307| {
00308| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00309| GCAP (Local0)
00310| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00311| }
00312|
00313| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 357
Line | AML source
--------------------------------------------------------------------------------
00354| {
00355| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00356| GCAP (Local0)
00357| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00358| }
00359|
00360| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 404
Line | AML source
--------------------------------------------------------------------------------
00401| {
00402| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00403| GCAP (Local0)
00404| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00405| }
00406|
00407| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 451
Line | AML source
--------------------------------------------------------------------------------
00448| {
00449| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00450| GCAP (Local0)
00451| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00452| }
00453|
00454| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 498
Line | AML source
--------------------------------------------------------------------------------
00495| {
00496| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00497| GCAP (Local0)
00498| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00499| }
00500|
00501| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
FAILED [MEDIUM] AMLAsmASL_MSG_RESERVED_NO_RETURN_VAL: Test 1, Assembler warning
in line 545
Line | AML source
--------------------------------------------------------------------------------
00542| {
00543| Store (\_PR.CPU0.CPDC (Arg0), Local0)
00544| GCAP (Local0)
00545| Return (Local0)
| ^
| Warning 3104: Reserved method should not return a value (_PDC)
00546| }
00547|
00548| Method (_OSC, 4, NotSerialized) // _OSC: Operating System Capabilities
================================================================================
ADVICE: (for Warning #3104, ASL_MSG_RESERVED_NO_RETURN_VAL): A reserved method
returned a value however it is not expected to return anything, so this does not
conform to the expected behaviour. The kernel will most probably ignore the
return value, so this is not going to produce any run time errors.
Table SSDT (3) reassembly: Found 0 errors, 8 warnings, 7 remarks.
Checking ACPI table SSDT (#4)
FAILED [MEDIUM] AMLAsmASL_MSG_NO_REGION: Test 1, Assembler warning in line 63
Line | AML source
--------------------------------------------------------------------------------
00060| Scope (\_SB.PCI0.SAT0)
00061| {
00062| Name (REGF, One)
00063| Method (_REG, 2, NotSerialized) // _REG: Region Availability
| ^
| Warning 3079: _REG has no corresponding Operation Region
00064| {
00065| If (LEqual (Arg0, 0x02))
00066| {
================================================================================
ADVICE: (for Warning #3079, ASL_MSG_NO_REGION): _REG requires a corresponding
Operation Region, however one was not found.
Table SSDT (4) reassembly: Found 0 errors, 1 warnings, 0 remarks.
Checking ACPI table SSDT (#5)
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4984
Line | AML source
--------------------------------------------------------------------------------
04981| {
04982| If (CondRefOf (\_SB.PCI0.PEG0.PEGP.SGPO))
04983| {
04984| \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, One, \_SB.PCI0.PEG0.PEGP.SGPO (PWEN, Zero, Else
| ^
| Error 6126: syntax error, unexpected PARSEOP_ELSE, expecting ',' or ')'
04985| {
04986| If (LEqual (Arg1, One))
04987| {
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4992
Line | AML source
--------------------------------------------------------------------------------
04989| {
04990| If (CondRefOf (\_SB.PCI0.PEG0.PEGP.SGPO))
04991| {
04992| \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, One, \_SB.PCI0.PEG0.PEGP.SGPO (PWEN, One, Sleep (DLPW), \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, Zero, Sleep (
| ^
| Error 6126: syntax error, unexpected PARSEOP_SLEEP, expecting ',' or ')'
04993| DLHR))))
04994| }
04995| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4992
Line | AML source
--------------------------------------------------------------------------------
04989| {
04990| If (CondRefOf (\_SB.PCI0.PEG0.PEGP.SGPO))
04991| {
04992| \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, One, \_SB.PCI0.PEG0.PEGP.SGPO (PWEN, One, Sleep (DLPW), \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, Zero, Sleep (
| ^
| Error 6126: syntax error, unexpected ','
04993| DLHR))))
04994| }
04995| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4992
Line | AML source
--------------------------------------------------------------------------------
04989| {
04990| If (CondRefOf (\_SB.PCI0.PEG0.PEGP.SGPO))
04991| {
04992| \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, One, \_SB.PCI0.PEG0.PEGP.SGPO (PWEN, One, Sleep (DLPW), \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, Zero, Sleep (
| ^
| Error 6126: syntax error, unexpected PARSEOP_SLEEP, expecting ',' or ')'
04993| DLHR))))
04994| }
04995| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4993
Line | AML source
--------------------------------------------------------------------------------
04990| If (CondRefOf (\_SB.PCI0.PEG0.PEGP.SGPO))
04991| {
04992| \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, One, \_SB.PCI0.PEG0.PEGP.SGPO (PWEN, One, Sleep (DLPW), \_SB.PCI0.PEG0.PEGP.SGPO (HLRS, Zero, Sleep (
04993| DLHR))))
| ^
| Error 6126: syntax error, unexpected ')'
04994| }
04995| }
04996| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 4997
Line | AML source
--------------------------------------------------------------------------------
04994| }
04995| }
04996| }
04997| }))
| ^
| Error 6126: syntax error, unexpected ')'
04998| }
04999| }
05000| }
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] AMLAsmASL_MSG_SYNTAX: Test 1, Assembler error in line 5050
Line | AML source
--------------------------------------------------------------------------------
05047| }
05048| }
05049| }
05050| }
| ^
| Error 6126: syntax error, unexpected '}', expecting $end and premature End-Of-File
05051|
================================================================================
ADVICE: (for Error #6126, ASL_MSG_SYNTAX): The disassembled code cannot be
reassembled using the strict IASL compiler as it contains syntax errors.
FAILED [HIGH] SyntaxCheckIASLCompilerAborted: Test 1, Compilation aborted early
due to a parser detected syntax error.
ADVICE: Some subsequent errors may not be detected because the compiler had to
terminate prematurely. If the compiler did not abort early then potentially
correct code may parse incorrectly producing some or many false positive errors.
Table SSDT (5) reassembly: Found 7 errors, 0 warnings, 0 remarks.
================================================================================
1 passed, 48 failed, 0 warning, 0 aborted, 0 skipped, 0 info only.
================================================================================
Code:
ATTFilter
dmicheck: DMI/SMBIOS table tests.
--------------------------------------------------------------------------------
Test 1 of 2: Find and test SMBIOS Table Entry Points.
This test tries to find and sanity check the SMBIOS data structures.
PASSED: Test 1, Found SMBIOS Table Entry Point at 0xf04c0
SMBIOS Entry Point Structure:
Anchor String : _SM_
Checksum : 0x64
Entry Point Length : 0x1f
Major Version : 0x02
Minor Version : 0x08
Maximum Struct Size : 0x114
Entry Point Revision : 0x00
Formatted Area : 0x00 0x00 0x00 0x00 0x00
Intermediate Anchor : _DMI_
Intermediate Checksum : 0x4d
Structure Table Length : 0x0aec
Structure Table Address: 0x000edae0
# of SMBIOS Structures : 0x0036
SBMIOS BCD Revision : 27
PASSED: Test 1, SMBIOS Table Entry Point Checksum is valid.
PASSED: Test 1, SMBIOS Table Entry Point Length is valid.
PASSED: Test 1, SMBIOS Table Entry Intermediate Anchor String _DMI_ is valid.
PASSED: Test 1, SMBIOS Table Entry Point Intermediate Checksum is valid.
PASSED: Test 1, SMBIOS Table Entry Structure Table Address and Length looks
valid.
Test 2 of 2: Test DMI/SMBIOS tables for errors.
PASSED: Test 2, Entry @ 0x000edae0 'BIOS Information (Type 0)'
PASSED: Test 2, Entry @ 0x000edb0e 'System Information (Type 1)'
PASSED: Test 2, Entry @ 0x000edb70 'Base Board Information (Type 2)'
PASSED: Test 2, Entry @ 0x000edba1 'Chassis Information (Type 3)'
PASSED: Test 2, Entry @ 0x000edbda 'System Slot Information (Type 9)'
PASSED: Test 2, Entry @ 0x000edc01 'System Slot Information (Type 9)'
PASSED: Test 2, Entry @ 0x000edc2a 'OEM Strings (Type 11)'
PASSED: Test 2, Entry @ 0x000edcc4 'System Configuration Options (Type 12)'
PASSED: Test 2, Entry @ 0x000edce1 'Hardware Security (Type 24)'
PASSED: Test 2, Entry @ 0x000edce8 'System Boot Information (Type 32)'
PASSED: Test 2, Entry @ 0x000edcfe 'Management Device (Type 34)'
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x0b) while accessing entry 'Voltage Probe (Type 26)' @ 0x000edd11, field
'Location (bits 0..4)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x06) while accessing entry 'Voltage Probe (Type 26)' @ 0x000edd11, field
'Status (bits 5..7)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
ADVICE: It may be worth checking against section 7.27 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000edd2e 'Management Device Threshold Data (Type 36)'
PASSED: Test 2, Entry @ 0x000edd40 'Management Device Component (Type 35)'
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x0f) while accessing entry 'Temperature Probe (Type 28)' @ 0x000edd4e,
field 'Location (bits 0..4)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x06) while accessing entry 'Temperature Probe (Type 28)' @ 0x000edd4e,
field 'Status (bits 5..7)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
ADVICE: It may be worth checking against section 7.29 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000edd6b 'Management Device Threshold Data (Type 36)'
PASSED: Test 2, Entry @ 0x000edd7d 'Management Device Component (Type 35)'
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x12 (range allowed
0x01..0x09, 0x10..0x11) while accessing entry 'Cooling Device (Type 27)' @
0x000edd8b, field 'Device Type', offset 0x06, mask 0x1f
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x06) while accessing entry 'Cooling Device (Type 27)' @ 0x000edd8b, field
'Status (bits 5..7)', offset 0x06
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
ADVICE: It may be worth checking against section 7.28 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000edda9 'Management Device Threshold Data (Type 36)'
PASSED: Test 2, Entry @ 0x000eddbb 'Management Device Component (Type 35)'
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x12 (range allowed
0x01..0x09, 0x10..0x11) while accessing entry 'Cooling Device (Type 27)' @
0x000eddc9, field 'Device Type', offset 0x06, mask 0x1f
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x06) while accessing entry 'Cooling Device (Type 27)' @ 0x000eddc9, field
'Status (bits 5..7)', offset 0x06
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
ADVICE: It may be worth checking against section 7.28 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000eddda 'Management Device Threshold Data (Type 36)'
PASSED: Test 2, Entry @ 0x000eddec 'Management Device Component (Type 35)'
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x0b) while accessing entry 'Electrical Current Probe (Type 29)' @
0x000eddfa, field 'Location (bits 0..4)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
FAILED [HIGH] DMIValueOutOfRange: Test 2, Out of range value 0x00 (range allowed
0x01..0x06) while accessing entry 'Electrical Current Probe (Type 29)' @
0x000eddfa, field 'Status (bits 5..7)', offset 0x05
ADVICE: A value that is out of range is incorrect and not conforming to the
SMBIOS specification. This field is not currently used by the Linux kernel, so
this firmware bug shouldn't cause any problems.
ADVICE: It may be worth checking against section 7.30 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000ede15 'Management Device Threshold Data (Type 36)'
PASSED: Test 2, Entry @ 0x000ede27 'Management Device Component (Type 35)'
PASSED: Test 2, Entry @ 0x000ede35 'Voltage Probe (Type 26)'
PASSED: Test 2, Entry @ 0x000ede52 'Temperature Probe (Type 28)'
PASSED: Test 2, Entry @ 0x000ede6f 'Cooling Device (Type 27)'
PASSED: Test 2, Entry @ 0x000ede8d 'Electrical Current Probe (Type 29)'
PASSED: Test 2, Entry @ 0x000edea8 'System Power Supply (Type 39)'
PASSED: Test 2, Entry @ 0x000edf60 'Onboard Device (Type 41)'
PASSED: Test 2, Entry @ 0x000edf79 'Onboard Device (Type 41)'
FAILED [MEDIUM] DMIReservedValueUsed: Test 2, Reserved bits 0x00ec was usedbits
8..15 would be reserved while accessing entry 'Processor Information (Type 4)' @
0x000edf92, field 'Processor Characteristics', offset 0x26
ADVICE: It may be worth checking against section 7.5 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000edff1 'Cache Information (Type 7)'
PASSED: Test 2, Entry @ 0x000ee015 'Cache Information (Type 7)'
PASSED: Test 2, Entry @ 0x000ee039 'Cache Information (Type 7)'
PASSED: Test 2, Entry @ 0x000ee05d 'Physical Memory Array (Type 16)'
FAILED [LOW] DMISerialNumber: Test 2, String index 0x03 in table entry 'Memory
Device (Type 17)' @ 0x000ee076, field 'Manufacturer', offset 0x17 has a default
value '[Empty]' and probably has not been updated by the BIOS vendor.
ADVICE: The DMI table contains data which is clearly been left in a default
setting and not been configured for this machine. Somebody has probably
forgotten to define this field and it basically means this field is effectively
useless, however the kernel does not use this data so the issue is fairly low.
FAILED [LOW] DMISerialNumber: Test 2, String index 0x04 in table entry 'Memory
Device (Type 17)' @ 0x000ee076, field 'Serial Number', offset 0x18 has a default
value '[Empty]' and probably has not been updated by the BIOS vendor.
ADVICE: The DMI table contains data which is clearly been left in a default
setting and not been configured for this machine. Somebody has probably
forgotten to define this field and it basically means this field is effectively
useless, however the kernel does not use this data so the issue is fairly low.
FAILED [LOW] DMISerialNumber: Test 2, String index 0x06 in table entry 'Memory
Device (Type 17)' @ 0x000ee076, field 'Part Number', offset 0x1a has a default
value '[Empty]' and probably has not been updated by the BIOS vendor.
ADVICE: The DMI table contains data which is clearly been left in a default
setting and not been configured for this machine. Somebody has probably
forgotten to define this field and it basically means this field is effectively
useless, however the kernel does not use this data so the issue is fairly low.
ADVICE: It may be worth checking against section 7.18 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
FAILED [LOW] DMIAssetTag: Test 2, String index 0x05 in table entry 'Memory
Device (Type 17)' @ 0x000ee0cf, field 'Asset Tag', offset 0x19 has a default
value '9876543210' and probably has not been updated by the BIOS vendor.
ADVICE: The DMI table contains data which is clearly been left in a default
setting and not been configured for this machine. Somebody has probably
forgotten to define this field and it basically means this field is effectively
useless, however the kernel does not use this data so the issue is fairly low.
ADVICE: It may be worth checking against section 7.18 of the System Management
BIOS (SMBIOS) Reference Specification (see hxxp://www.dmtf.org/standards
/smbios).
PASSED: Test 2, Entry @ 0x000ee13a 'Memory Array Mapped Address (Type 19)'
PASSED: Test 2, Entry @ 0x000ee15b 'Memory Device Mapped Address (Type 20)'
PASSED: Test 2, Entry @ 0x000ee180 'Unknown (Type 208)'
PASSED: Test 2, Entry @ 0x000ee187 'BIOS Language Information (Type 13)'
PASSED: Test 2, Entry @ 0x000ee26a 'Unknown (Type 136)'
PASSED: Test 2, Entry @ 0x000ee272 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee295 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee2e3 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee3f7 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee456 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee526 'Unknown (Type 221)'
PASSED: Test 2, Entry @ 0x000ee556 'Group Associations (Type 14)'
PASSED: Test 2, Entry @ 0x000ee584 'Unknown (Type 131)'
PASSED: Test 2, Entry @ 0x000ee5c6 'End of Table (Type 127)'
SKIPPED: Test 2, Cannot find SMBIOS30 table entry, skip the test.
================================================================================
52 passed, 15 failed, 0 warning, 0 aborted, 1 skipped, 0 info only.
================================================================================
Code:
ATTFilter aspm: PCIe ASPM test.
--------------------------------------------------------------------------------
Test 1 of 2: PCIe ASPM ACPI test.
PCIe ASPM is not controlled by Linux kernel.
ADVICE: BIOS reports that Linux kernel should not modify ASPM settings that BIOS
configured. It can be intentional because hardware vendors identified some
capability bugs between the motherboard and the add-on cards.
Test 2 of 2: PCIe ASPM registers test.
WARNING: Test 2, RP 00h:1Ch.03h L0s not enabled.
WARNING: Test 2, Device 03h:00h.00h L0s not enabled.
ADVICE: The ASPM L0s low power Link state is optimized for short entry and exit
latencies, while providing substantial power savings. Disabling L0s of a PCIe
device may increases power consumption, and will impact the battery life of a
mobile system.
PASSED: Test 2, PCIe ASPM setting matched was matched.
Code:
ATTFilter oops: Scan kernel log for Oopses.
--------------------------------------------------------------------------------
Test 1 of 1: Kernel log oops check.
PASSED: Test 1, Found no oopses in kernel log.
PASSED: Test 1, Found no WARN_ON warnings in kernel log.
================================================================================
2 passed, 0 failed, 0 warning, 0 aborted, 0 skipped, 0 info only.
================================================================================
klog: Scan kernel log for errors and warnings.
--------------------------------------------------------------------------------
Test 1 of 1: Kernel log error check.
Kernel message: [ 0.016926] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
ADVICE: This is not exactly a failure but a warning from the kernel. The
MSR_IA32_ENERGY_PERF_BIAS was initialized and defaulted to a high performance
bias setting. The kernel has detected this and changed it down to a 'normal'
bias setting.
Kernel message: [ 0.111628] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep
State [\_S1_] (20150619/hwxface-580)
ADVICE: The exception comes from kernel cannot find _S1 namespace object that
contains the register values for the sleep state when kernel would like to setup
all the sleep state information. This means that the kernel does not know how to
enter the S1 sleep state, however, it should not be a problem if the S1 sleep
state isn't supported intentionally.
Kernel message: [ 0.111634] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep
State [\_S2_] (20150619/hwxface-580)
ADVICE: The exception comes from kernel cannot find _S2 namespace object that
contains the register values for the sleep state when kernel would like to setup
all the sleep state information. This means that the kernel does not know how to
enter the S2 sleep state, however, it should not be a problem if the S2 sleep
state isn't supported intentionally.
FAILED [HIGH] KlogAcpiFieldExceedsBuffer: Test 1, HIGH Kernel message: [
81.084363] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160
(bits) (20150619/dsopcode-236)
Message repeated 9 times.
ADVICE: Failed to initialise an ACPI buffer field, the field exceeded the buffer
size provided. This is a firmware bug.
FAILED [HIGH] KlogAcpiBufferLimit: Test 1, HIGH Kernel message: [ 81.084367]
ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0),
AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Message repeated 9 times.
ADVICE: Generally this error occurs because of access outside of a buffer. This
occurs for several reasons: a) A field does not fit within the current length of
a buffer, b) an ACPI table load did not fit into a buffer, c) An attempt to
convert a buffer into an integer failed because the buffer was zero sized, d) a
SMBus/IPMI/GenericSerialBus write failed because the buffer was too small, e) An
index into a buffer was too long and fell outside the buffer.
FAILED [HIGH] KlogAcpiBufferLimit: Test 1, HIGH Kernel message: [ 81.084380]
ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node
ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
Message repeated 9 times.
ADVICE: Generally this error occurs because of access outside of a buffer. This
occurs for several reasons: a) A field does not fit within the current length of
a buffer, b) an ACPI table load did not fit into a buffer, c) An attempt to
convert a buffer into an integer failed because the buffer was zero sized, d) a
SMBus/IPMI/GenericSerialBus write failed because the buffer was too small, e) An
index into a buffer was too long and fell outside the buffer.
Found 3 unique errors in kernel log.
================================================================================
0 passed, 3 failed, 0 warning, 0 aborted, 0 skipped, 0 info only.
===================================================================
Code:
ATTFilter
Test Failure Summary
================================================================================
Critical failures: NONE
High failures: 41
klog: HIGH Kernel message: [ 81.084363] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
klog: HIGH Kernel message: [ 81.084367] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
klog: HIGH Kernel message: [ 81.084380] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
dmicheck: Out of range value 0x00 (range allowed 0x01..0x0b) while accessing entry 'Voltage Probe (Type 26)' @ 0x000edd11, field 'Location (bits 0..4)', offset 0x05
dmicheck: Out of range value 0x00 (range allowed 0x01..0x06) while accessing entry 'Voltage Probe (Type 26)' @ 0x000edd11, field 'Status (bits 5..7)', offset 0x05
dmicheck: Out of range value 0x00 (range allowed 0x01..0x0f) while accessing entry 'Temperature Probe (Type 28)' @ 0x000edd4e, field 'Location (bits 0..4)', offset 0x05
dmicheck: Out of range value 0x00 (range allowed 0x01..0x06) while accessing entry 'Temperature Probe (Type 28)' @ 0x000edd4e, field 'Status (bits 5..7)', offset 0x05
dmicheck: Out of range value 0x12 (range allowed 0x01..0x09, 0x10..0x11) while accessing entry 'Cooling Device (Type 27)' @ 0x000edd8b, field 'Device Type', offset 0x06, mask 0x1f
dmicheck: Out of range value 0x00 (range allowed 0x01..0x06) while accessing entry 'Cooling Device (Type 27)' @ 0x000edd8b, field 'Status (bits 5..7)', offset 0x06
dmicheck: Out of range value 0x12 (range allowed 0x01..0x09, 0x10..0x11) while accessing entry 'Cooling Device (Type 27)' @ 0x000eddc9, field 'Device Type', offset 0x06, mask 0x1f
dmicheck: Out of range value 0x00 (range allowed 0x01..0x06) while accessing entry 'Cooling Device (Type 27)' @ 0x000eddc9, field 'Status (bits 5..7)', offset 0x06
dmicheck: Out of range value 0x00 (range allowed 0x01..0x0b) while accessing entry 'Electrical Current Probe (Type 29)' @ 0x000eddfa, field 'Location (bits 0..4)', offset 0x05
dmicheck: Out of range value 0x00 (range allowed 0x01..0x06) while accessing entry 'Electrical Current Probe (Type 29)' @ 0x000eddfa, field 'Status (bits 5..7)', offset 0x05
syntaxcheck: Assembler error in line 6740
syntaxcheck: Assembler error in line 10817
syntaxcheck: Assembler error in line 20852
syntaxcheck: Assembler error in line 21193
syntaxcheck: Assembler error in line 25106
syntaxcheck: Compilation aborted early due to a parser detected syntax error.
syntaxcheck: Assembler error in line 223
syntaxcheck: Assembler error in line 243
syntaxcheck: Assembler error in line 244
syntaxcheck: Assembler error in line 263
syntaxcheck: Assembler error in line 264
syntaxcheck: Assembler error in line 283
syntaxcheck: Assembler error in line 284
syntaxcheck: Assembler error in line 303
syntaxcheck: Assembler error in line 304
syntaxcheck: Assembler error in line 323
syntaxcheck: Assembler error in line 324
syntaxcheck: Assembler error in line 343
syntaxcheck: Assembler error in line 344
syntaxcheck: Assembler error in line 363
syntaxcheck: Assembler error in line 364
syntaxcheck: Assembler error in line 383
syntaxcheck: Assembler error in line 424
syntaxcheck: Assembler error in line 4984
syntaxcheck: Assembler error in line 4992
syntaxcheck: Assembler error in line 4993
syntaxcheck: Assembler error in line 4997
syntaxcheck: Assembler error in line 5050
Medium failures: 32
dmicheck: Reserved bits 0x00ec was usedbits 8..15 would be reserved while accessing entry 'Processor Information (Type 4)' @ 0x000edf92, field 'Processor Characteristics', offset 0x26
msr: MSR 0x000004c8 A_PMC7 has 1 inconsistent values across 2 CPUs (shift: 0 mask: 0xffffffffffffffff).
cpufreq: CPU max frequency is unreachable
cpufreq: Can't set CPU frequencies
virt: Virtualization extensions supported but disabled by BIOS.
apicedge: Non-Legacy interrupt 0 is incorrectly level triggered.
apicedge: Non-Legacy interrupt 1 is incorrectly level triggered.
apicedge: Non-Legacy interrupt 8 is incorrectly level triggered.
apicedge: Non-Legacy interrupt 12 is incorrectly level triggered.
wmi: GUID 2B814318-4BE8-4707-9D84-A190A859B5D0 is unknown to the kernel, a driver may need to be implemented for this GUID.
syntaxcheck: Assembler warning in line 150
syntaxcheck: Assembler warning in line 243
syntaxcheck: Assembler warning in line 310
syntaxcheck: Assembler warning in line 357
syntaxcheck: Assembler warning in line 404
syntaxcheck: Assembler warning in line 451
syntaxcheck: Assembler warning in line 498
syntaxcheck: Assembler warning in line 545
syntaxcheck: Assembler warning in line 63
method: \NFC_._HID returned a integer 0x00000000 (EISA ID @@@0000) but the this is not a valid EISA ID encoded PNP ID.
method: \_SB_.PCI0.RP01.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP02.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP03.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP04.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP05.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP06.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP07.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.RP08.PXSX.WRST._STA returned a NULL object, and did not return ACPI_TYPE_INTEGER.
method: \_SB_.PCI0.SAT0.NVM0._PS0 returned values, but was expected to return nothing.
method: \_SB_.PCI0.SAT0.NVM0._PS3 returned values, but was expected to return nothing.
method: \_PR_.CPU0._PCT returned a NULL object, and did not return ACPI_TYPE_PACKAGE.
fan: Fan present but has no cur_state present.
Low failures: 10
dmicheck: String index 0x03 in table entry 'Memory Device (Type 17)' @ 0x000ee076, field 'Manufacturer', offset 0x17 has a default value '[Empty]' and probably has not been updated by the BIOS vendor.
dmicheck: String index 0x04 in table entry 'Memory Device (Type 17)' @ 0x000ee076, field 'Serial Number', offset 0x18 has a default value '[Empty]' and probably has not been updated by the BIOS vendor.
dmicheck: String index 0x06 in table entry 'Memory Device (Type 17)' @ 0x000ee076, field 'Part Number', offset 0x1a has a default value '[Empty]' and probably has not been updated by the BIOS vendor.
dmicheck: String index 0x05 in table entry 'Memory Device (Type 17)' @ 0x000ee0cf, field 'Asset Tag', offset 0x19 has a default value '9876543210' and probably has not been updated by the BIOS vendor.
syntaxcheck: Assembler remark in line 160
syntaxcheck: Assembler remark in line 175
syntaxcheck: Assembler remark in line 178
syntaxcheck: Assembler remark in line 204
syntaxcheck: Assembler remark in line 283
syntaxcheck: Assembler remark in line 293
Other failures: NONE
Test |Pass |Fail |Abort|Warn |Skip |Info |
---------------+-----+-----+-----+-----+-----+-----+
acpiinfo | | | | | | 3|
acpitables | 18| | | | | |
apicedge | | 4| | | | |
apicinstance | 1| | | | | |
asf | | | | | 1| |
aspm | 1| | | 2| | |
autobrightness | | | | | | |
bert | | | | | 1| |
bgrt | | | | | 1| |
bios32 | | | | | | |
bios_info | | | | | | 1|
boot | | | | | 1| |
checksum | 20| | | | | |
cpep | | | | | 1| |
cpufreq | 3| 2| | 2| 2| |
crs | | | | | 1| |
csm | | | | | | 1|
csrt | | | | | 1| |
cstates | 3| | | | | |
dbg2 | | | | | 1| |
dbgp | 1| | | | | |
dmar | | | | | 1| |
dmicheck | 52| 15| | | 1| |
ebda | 1| | | | | |
ecdt | | | | | 1| |
erst | | | | | 1| |
facs | 1| | | | | |
fadt | 4| | | | | |
fan | 7| 1| | | | |
fpdt | 1| | | | | |
gtdt | | | | | 1| |
hda_audio | | | | | 1| |
hest | | | | | 1| |
hpet | 5| | | | | |
iort | | | | | 1| |
klog | | 3| | | | |
lpit | | | | | 1| |
madt | 1| | | | | |
maxfreq | 1| | | | | |
maxreadreq | 1| | | | | |
mcfg | 2| | | | | |
mchi | | | | | 1| |
method | 553| 12| | | 132| |
microcode | | | | | 1| |
mpcheck | 9| | | | | |
msdm | | | | | 1| |
msr | 114| 1| | | | |
mtrr | 2| | | | 1| |
nx | 3| | | | | |
oops | 2| | | | | |
osilinux | 1| | | | | |
pcc | | | | | | 1|
pciirq | 4| | | | | |
pnp | 2| | | | | |
rsdp | 1| | | | | |
rsdt | 1| | | | | |
sbst | | | | | 1| |
securebootcert | | | | | 1| |
slic | | | | | 1| |
slit | | | | | 1| |
spcr | | | | | 1| |
spmi | | | | | 1| |
srat | | | | | 1| |
stao | | | | | 1| |
syntaxcheck | 1| 48| | | | |
tcpa | 1| | | | | |
tpm2 | | | 1| | | |
uefi | 1| | | | | |
uefibootpath | | | 1| | | |
version | | | | | | 4|
virt | | 1| | | | |
waet | | | | | 1| |
wakealarm | 4| | | | | |
wdat | | | | | 1| |
wmi | 3| 1| | | | |
xenv | | | 1| | | |
xsdt | 1| | | | | |
---------------+-----+-----+-----+-----+-----+-----+
Total: | 826| 88| 3| 4| 165| 10|
---------------+-----+-----+-----+-----+-----+-----+
|
|
15.03.2016, 11:26
| #13 |
| | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR dmesg DUMP Code:
ATTFilter <6>[ 0.000000] Initializing cgroup subsys cpuset
<6>[ 0.000000] Initializing cgroup subsys cpu
<6>[ 0.000000] Initializing cgroup subsys cpuacct
<5>[ 0.000000] Linux version 4.2.0-16-generic (buildd@lcy01-07) (gcc version 5.2.1 20151003 (Ubuntu 5.2.1-21ubuntu2) ) #19-Ubuntu SMP Thu Oct 8 15:35:06 UTC 2015 (Ubuntu 4.2.0-16.19-generic 4.2.3)
<6>[ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-4.2.0-16-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
<6>[ 0.000000] KERNEL supported cpus:
<6>[ 0.000000] Intel GenuineIntel
<6>[ 0.000000] AMD AuthenticAMD
<6>[ 0.000000] Centaur CentaurHauls
<6>[ 0.000000] x86/fpu: Supporting XSAVE feature 0x01: 'x87 floating point registers'
<6>[ 0.000000] x86/fpu: Supporting XSAVE feature 0x02: 'SSE registers'
<6>[ 0.000000] x86/fpu: Enabled xstate features 0x3, context size is 0x240 bytes, using 'standard' format.
<6>[ 0.000000] x86/fpu: Using 'eager' FPU context switches.
<6>[ 0.000000] e820: BIOS-provided physical RAM map:
<6>[ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009d7ff] usable
<6>[ 0.000000] BIOS-e820: [mem 0x000000000009d800-0x000000000009ffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000c8b3bfff] usable
<6>[ 0.000000] BIOS-e820: [mem 0x00000000c8b3c000-0x00000000c8b42fff] ACPI NVS
<6>[ 0.000000] BIOS-e820: [mem 0x00000000c8b43000-0x00000000c9601fff] usable
<6>[ 0.000000] BIOS-e820: [mem 0x00000000c9602000-0x00000000c98c2fff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000c98c3000-0x00000000dbaf6fff] usable
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dbaf7000-0x00000000dbb5ffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dbb60000-0x00000000dbb89fff] ACPI data
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dbb8a000-0x00000000dbceffff] ACPI NVS
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dbcf0000-0x00000000dbffefff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dbfff000-0x00000000dbffffff] usable
<6>[ 0.000000] BIOS-e820: [mem 0x00000000dd000000-0x00000000df1fffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000f8000000-0x00000000fbffffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000fec00000-0x00000000fec00fff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000fed00000-0x00000000fed03fff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x00000000ff000000-0x00000000ffffffff] reserved
<6>[ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000011fdfffff] usable
<6>[ 0.000000] NX (Execute Disable) protection: active
<6>[ 0.000000] SMBIOS 2.8 present.
<7>[ 0.000000] DMI: Hewlett-Packard HP 280 G1 MT/2B34, BIOS 80.14 09/28/2015
<7>[ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
<7>[ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
<6>[ 0.000000] e820: last_pfn = 0x11fe00 max_arch_pfn = 0x400000000
<7>[ 0.000000] MTRR default type: uncachable
<7>[ 0.000000] MTRR fixed ranges enabled:
<7>[ 0.000000] 00000-9FFFF write-back
<7>[ 0.000000] A0000-BFFFF uncachable
<7>[ 0.000000] C0000-CFFFF write-protect
<7>[ 0.000000] D0000-E7FFF uncachable
<7>[ 0.000000] E8000-FFFFF write-protect
<7>[ 0.000000] MTRR variable ranges enabled:
<7>[ 0.000000] 0 base 0000000000 mask 7F00000000 write-back
<7>[ 0.000000] 1 base 0100000000 mask 7FE0000000 write-back
<7>[ 0.000000] 2 base 00E0000000 mask 7FE0000000 uncachable
<7>[ 0.000000] 3 base 00DE000000 mask 7FFE000000 uncachable
<7>[ 0.000000] 4 base 00DD000000 mask 7FFF000000 uncachable
<7>[ 0.000000] 5 base 011FE00000 mask 7FFFE00000 uncachable
<7>[ 0.000000] 6 disabled
<7>[ 0.000000] 7 disabled
<7>[ 0.000000] 8 disabled
<7>[ 0.000000] 9 disabled
<6>[ 0.000000] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WC UC- WT
<7>[ 0.000000] original variable MTRRs
<7>[ 0.000000] reg 0, base: 0GB, range: 4GB, type WB
<7>[ 0.000000] reg 1, base: 4GB, range: 512MB, type WB
<7>[ 0.000000] reg 2, base: 3584MB, range: 512MB, type UC
<7>[ 0.000000] reg 3, base: 3552MB, range: 32MB, type UC
<7>[ 0.000000] reg 4, base: 3536MB, range: 16MB, type UC
<7>[ 0.000000] reg 5, base: 4606MB, range: 2MB, type UC
<6>[ 0.000000] total RAM covered: 4046M
<6>[ 0.000000] Found optimal setting for mtrr clean up
<6>[ 0.000000] gran_size: 64K chunk_size: 64M num_reg: 7 lose cover RAM: 0G
<7>[ 0.000000] New variable MTRRs
<7>[ 0.000000] reg 0, base: 0GB, range: 2GB, type WB
<7>[ 0.000000] reg 1, base: 2GB, range: 1GB, type WB
<7>[ 0.000000] reg 2, base: 3GB, range: 512MB, type WB
<7>[ 0.000000] reg 3, base: 3536MB, range: 16MB, type UC
<7>[ 0.000000] reg 4, base: 3552MB, range: 32MB, type UC
<7>[ 0.000000] reg 5, base: 4GB, range: 512MB, type WB
<7>[ 0.000000] reg 6, base: 4606MB, range: 2MB, type UC
<7>[ 0.000000] e820: update [mem 0xdd000000-0xffffffff] usable ==> reserved
<6>[ 0.000000] e820: last_pfn = 0xdc000 max_arch_pfn = 0x400000000
<6>[ 0.000000] found SMP MP-table at [mem 0x000fd7c0-0x000fd7cf] mapped at [ffff8800000fd7c0]
<6>[ 0.000000] Scanning 1 areas for low memory corruption
<7>[ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576
<6>[ 0.000000] Using GB pages for direct mapping
<6>[ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]
<7>[ 0.000000] [mem 0x00000000-0x000fffff] page 4k
<7>[ 0.000000] BRK [0x01ff0000, 0x01ff0fff] PGTABLE
<7>[ 0.000000] BRK [0x01ff1000, 0x01ff1fff] PGTABLE
<7>[ 0.000000] BRK [0x01ff2000, 0x01ff2fff] PGTABLE
<6>[ 0.000000] init_memory_mapping: [mem 0x11fc00000-0x11fdfffff]
<7>[ 0.000000] [mem 0x11fc00000-0x11fdfffff] page 2M
<7>[ 0.000000] BRK [0x01ff3000, 0x01ff3fff] PGTABLE
<6>[ 0.000000] init_memory_mapping: [mem 0x100000000-0x11fbfffff]
<7>[ 0.000000] [mem 0x100000000-0x11fbfffff] page 2M
<6>[ 0.000000] init_memory_mapping: [mem 0xc0000000-0xc8b3bfff]
<7>[ 0.000000] [mem 0xc0000000-0xc89fffff] page 2M
<7>[ 0.000000] [mem 0xc8a00000-0xc8b3bfff] page 4k
<7>[ 0.000000] BRK [0x01ff4000, 0x01ff4fff] PGTABLE
<7>[ 0.000000] BRK [0x01ff5000, 0x01ff5fff] PGTABLE
<6>[ 0.000000] init_memory_mapping: [mem 0xc8b43000-0xc9601fff]
<7>[ 0.000000] [mem 0xc8b43000-0xc8bfffff] page 4k
<7>[ 0.000000] [mem 0xc8c00000-0xc95fffff] page 2M
<7>[ 0.000000] [mem 0xc9600000-0xc9601fff] page 4k
<6>[ 0.000000] init_memory_mapping: [mem 0xc98c3000-0xdbaf6fff]
<7>[ 0.000000] [mem 0xc98c3000-0xc99fffff] page 4k
<7>[ 0.000000] [mem 0xc9a00000-0xdb9fffff] page 2M
<7>[ 0.000000] [mem 0xdba00000-0xdbaf6fff] page 4k
<6>[ 0.000000] init_memory_mapping: [mem 0xdbfff000-0xdbffffff]
<7>[ 0.000000] [mem 0xdbfff000-0xdbffffff] page 4k
<6>[ 0.000000] init_memory_mapping: [mem 0x00100000-0xbfffffff]
<7>[ 0.000000] [mem 0x00100000-0x001fffff] page 4k
<7>[ 0.000000] [mem 0x00200000-0x3fffffff] page 2M
<7>[ 0.000000] [mem 0x40000000-0xbfffffff] page 1G
<6>[ 0.000000] RAMDISK: [mem 0x33ba0000-0x35dc7fff]
<6>[ 0.000000] ACPI: Early table checksum verification disabled
<4>[ 0.000000] ACPI: RSDP 0x00000000000F0490 000024 (v02 HPQOEM)
<4>[ 0.000000] ACPI: XSDT 0x00000000DBB69088 000094 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<4>[ 0.000000] ACPI: FACP 0x00000000DBB81FA0 00010C (v05 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<4>[ 0.000000] ACPI: DSDT 0x00000000DBB691B0 018DEC (v02 HPQOEM SLIC-CPC 00008014 INTL 20120711)
<4>[ 0.000000] ACPI: FACS 0x00000000DBCEFF80 000040
<4>[ 0.000000] ACPI: APIC 0x00000000DBB820B0 000062 (v03 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<4>[ 0.000000] ACPI: FPDT 0x00000000DBB82118 000044 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<4>[ 0.000000] ACPI: FIDT 0x00000000DBB82160 00009C (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<4>[ 0.000000] ACPI: TCPA 0x00000000DBB82200 000032 (v02 HPQOEM SLIC-CPC 00000001 MSFT 01000013)
<4>[ 0.000000] ACPI: SSDT 0x00000000DBB82238 000C7D (v02 HPQOEM SLIC-CPC 00001000 INTL 20120711)
<4>[ 0.000000] ACPI: SSDT 0x00000000DBB82EB8 000539 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
<4>[ 0.000000] ACPI: SSDT 0x00000000DBB833F8 000B74 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
<4>[ 0.000000] ACPI: MCFG 0x00000000DBB83F70 00003C (v01 HPQOEM SLIC-CPC 01072009 MSFT 00000097)
<4>[ 0.000000] ACPI: HPET 0x00000000DBB83FB0 000038 (v01 HPQOEM SLIC-CPC 01072009 AMI. 00000005)
<4>[ 0.000000] ACPI: SSDT 0x00000000DBB83FE8 00036D (v01 HPQOEM SLIC-CPC 00001000 INTL 20120711)
<4>[ 0.000000] ACPI: SSDT 0x00000000DBB84358 005722 (v02 HPQOEM SLIC-CPC 00003000 INTL 20120711)
<4>[ 0.000000] ACPI: UEFI 0x00000000DBB89A80 000042 (v01 HPQOEM SLIC-CPC 01072009 00000000)
<4>[ 0.000000] ACPI: DBGP 0x00000000DBB89AC8 000034 (v01 HPQOEM SLIC-CPC 01072009 AMI 00010013)
<7>[ 0.000000] ACPI: Local APIC address 0xfee00000
<6>[ 0.000000] No NUMA configuration found
<6>[ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000011fdfffff]
<6>[ 0.000000] NODE_DATA(0) allocated [mem 0x11fdf7000-0x11fdfbfff]
<7>[ 0.000000] [ffffea0000000000-ffffea00047fffff] PMD -> [ffff88011b400000-ffff88011f3fffff] on node 0
<6>[ 0.000000] Zone ranges:
<6>[ 0.000000] DMA [mem 0x0000000000001000-0x0000000000ffffff]
<6>[ 0.000000] DMA32 [mem 0x0000000001000000-0x00000000ffffffff]
<6>[ 0.000000] Normal [mem 0x0000000100000000-0x000000011fdfffff]
<6>[ 0.000000] Movable zone start for each node
<6>[ 0.000000] Early memory node ranges
<6>[ 0.000000] node 0: [mem 0x0000000000001000-0x000000000009cfff]
<6>[ 0.000000] node 0: [mem 0x0000000000100000-0x00000000c8b3bfff]
<6>[ 0.000000] node 0: [mem 0x00000000c8b43000-0x00000000c9601fff]
<6>[ 0.000000] node 0: [mem 0x00000000c98c3000-0x00000000dbaf6fff]
<6>[ 0.000000] node 0: [mem 0x00000000dbfff000-0x00000000dbffffff]
<6>[ 0.000000] node 0: [mem 0x0000000100000000-0x000000011fdfffff]
<6>[ 0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000011fdfffff]
<7>[ 0.000000] On node 0 totalpages: 1029580
<7>[ 0.000000] DMA zone: 64 pages used for memmap
<7>[ 0.000000] DMA zone: 21 pages reserved
<7>[ 0.000000] DMA zone: 3996 pages, LIFO batch:0
<7>[ 0.000000] DMA32 zone: 13985 pages used for memmap
<7>[ 0.000000] DMA32 zone: 895024 pages, LIFO batch:31
<7>[ 0.000000] Normal zone: 2040 pages used for memmap
<7>[ 0.000000] Normal zone: 130560 pages, LIFO batch:31
<6>[ 0.000000] Reserving Intel graphics stolen memory at 0xdd200000-0xdf1fffff
<6>[ 0.000000] ACPI: PM-Timer IO Port: 0x1808
<7>[ 0.000000] ACPI: Local APIC address 0xfee00000
<6>[ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1])
<6>[ 0.000000] IOAPIC[0]: apic_id 8, version 32, address 0xfec00000, GSI 0-23
<6>[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
<6>[ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
<7>[ 0.000000] ACPI: IRQ0 used by override.
<7>[ 0.000000] ACPI: IRQ9 used by override.
<6>[ 0.000000] Using ACPI (MADT) for SMP configuration information
<6>[ 0.000000] ACPI: HPET id: 0x8086a701 base: 0xfed00000
<6>[ 0.000000] smpboot: Allowing 2 CPUs, 0 hotplug CPUs
<6>[ 0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000dffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0x000e0000-0x000fffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xc8b3c000-0xc8b42fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xc9602000-0xc98c2fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdbaf7000-0xdbb5ffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdbb60000-0xdbb89fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdbb8a000-0xdbceffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdbcf0000-0xdbffefff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdc000000-0xdcffffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdd000000-0xdf1fffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xdf200000-0xf7ffffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xf8000000-0xfbffffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfc000000-0xfebfffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfec00000-0xfec00fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfec01000-0xfecfffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfed00000-0xfed03fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfed04000-0xfed1bfff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfed20000-0xfedfffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfee00000-0xfee00fff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xfee01000-0xfeffffff]
<6>[ 0.000000] PM: Registered nosave memory: [mem 0xff000000-0xffffffff]
<6>[ 0.000000] e820: [mem 0xdf200000-0xf7ffffff] available for PCI devices
<6>[ 0.000000] Booting paravirtualized kernel on bare hardware
<6>[ 0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
<6>[ 0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:2 nr_node_ids:1
<6>[ 0.000000] PERCPU: Embedded 33 pages/cpu @ffff88011fa00000 s96728 r8192 d30248 u1048576
<7>[ 0.000000] pcpu-alloc: s96728 r8192 d30248 u1048576 alloc=1*2097152
<7>[ 0.000000] pcpu-alloc: [0] 0 1
<6>[ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1013470
<6>[ 0.000000] Policy zone: Normal
<5>[ 0.000000] Kernel command line: BOOT_IMAGE=/vmlinuz-4.2.0-16-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
<6>[ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
<7>[ 0.000000] Calgary: detecting Calgary via BIOS EBDA area
<7>[ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing!
<6>[ 0.000000] Memory: 3934776K/4118320K available (8146K kernel code, 1237K rwdata, 3800K rodata, 1460K init, 1292K bss, 183544K reserved, 0K cma-reserved)
<6>[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
<6>[ 0.000000] Hierarchical RCU implementation.
<6>[ 0.000000] Build-time adjustment of leaf fanout to 64.
<6>[ 0.000000] RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=2.
<6>[ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=2
<6>[ 0.000000] NR_IRQS:16640 nr_irqs:440 16
<6>[ 0.000000] Offload RCU callbacks from all CPUs
<6>[ 0.000000] Offload RCU callbacks from CPUs: 0-1.
<6>[ 0.000000] vt handoff: transparent VT on vt#7
<6>[ 0.000000] Console: colour dummy device 80x25
<6>[ 0.000000] console [tty0] enabled
<6>[ 0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns
<7>[ 0.000000] hpet clockevent registered
<6>[ 0.000000] tsc: Fast TSC calibration using PIT
<6>[ 0.000000] tsc: Detected 3192.511 MHz processor
<6>[ 0.000023] Calibrating delay loop (skipped), value calculated using timer frequency.. 6385.02 BogoMIPS (lpj=12770044)
<6>[ 0.000025] pid_max: default: 32768 minimum: 301
<6>[ 0.000029] ACPI: Core revision 20150619
<4>[ 0.014965] ACPI: All ACPI Tables successfully acquired
<6>[ 0.014979] Security Framework initialized
<6>[ 0.014987] AppArmor: AppArmor initialized
<6>[ 0.014988] Yama: becoming mindful.
<6>[ 0.015189] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)
<6>[ 0.016226] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)
<6>[ 0.016753] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes)
<6>[ 0.016758] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes)
<6>[ 0.016939] Initializing cgroup subsys blkio
<6>[ 0.016941] Initializing cgroup subsys memory
<6>[ 0.016947] Initializing cgroup subsys devices
<6>[ 0.016949] Initializing cgroup subsys freezer
<6>[ 0.016950] Initializing cgroup subsys net_cls
<6>[ 0.016952] Initializing cgroup subsys perf_event
<6>[ 0.016953] Initializing cgroup subsys net_prio
<6>[ 0.016955] Initializing cgroup subsys hugetlb
<6>[ 0.016974] CPU: Physical Processor ID: 0
<6>[ 0.016975] CPU: Processor Core ID: 0
<4>[ 0.016978] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
<4>[ 0.016979] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)
<6>[ 0.017736] mce: CPU supports 7 MCE banks
<6>[ 0.017746] CPU0: Thermal monitoring enabled (TM1)
<6>[ 0.017752] process: using mwait in idle threads
<6>[ 0.017755] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024
<6>[ 0.017755] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4
<6>[ 0.017854] Freeing SMP alternatives memory: 28K (ffffffff81ea4000 - ffffffff81eab000)
<6>[ 0.019323] ftrace: allocating 30905 entries in 121 pages
<6>[ 0.029805] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=0 pin2=0
<7>[ 0.069524] TSC deadline timer enabled
<6>[ 0.069527] smpboot: CPU0: Intel(R) Pentium(R) CPU G3250 @ 3.20GHz (fam: 06, model: 3c, stepping: 03)
<6>[ 0.069548] Performance Events: PEBS fmt2+, 16-deep LBR, Haswell events, full-width counters, Intel PMU driver.
<6>[ 0.069564] ... version: 3
<6>[ 0.069564] ... bit width: 48
<6>[ 0.069565] ... generic registers: 8
<6>[ 0.069566] ... value mask: 0000ffffffffffff
<6>[ 0.069566] ... max period: 0000ffffffffffff
<6>[ 0.069567] ... fixed-purpose events: 3
<6>[ 0.069567] ... event mask: 00000007000000ff
<6>[ 0.070154] x86: Booting SMP configuration:
<6>[ 0.070155] .... node #0, CPUs: #1
<6>[ 0.074196] x86: Booted up 1 node, 2 CPUs
<6>[ 0.074199] smpboot: Total of 2 processors activated (12770.04 BogoMIPS)
<6>[ 0.074225] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
<6>[ 0.075583] devtmpfs: initialized
<6>[ 0.076915] evm: security.selinux
<6>[ 0.076916] evm: security.SMACK64
<6>[ 0.076917] evm: security.SMACK64EXEC
<6>[ 0.076917] evm: security.SMACK64TRANSMUTE
<6>[ 0.076918] evm: security.SMACK64MMAP
<6>[ 0.076919] evm: security.ima
<6>[ 0.076919] evm: security.capability
<6>[ 0.076959] PM: Registering ACPI NVS region [mem 0xc8b3c000-0xc8b42fff] (28672 bytes)
<6>[ 0.076960] PM: Registering ACPI NVS region [mem 0xdbb8a000-0xdbceffff] (1466368 bytes)
<6>[ 0.077017] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
<6>[ 0.077070] pinctrl core: initialized pinctrl subsystem
<6>[ 0.077153] RTC time: 9:16:50, date: 03/15/16
<6>[ 0.077234] NET: Registered protocol family 16
<6>[ 0.086214] cpuidle: using governor ladder
<6>[ 0.094226] cpuidle: using governor menu
<6>[ 0.094270] ACPI FADT declares the system doesn't support PCIe ASPM, so disable it
<6>[ 0.094271] ACPI: bus type PCI registered
<6>[ 0.094273] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
<6>[ 0.094316] PCI: MMCONFIG for domain 0000 [bus 00-3f] at [mem 0xf8000000-0xfbffffff] (base 0xf8000000)
<6>[ 0.094317] PCI: MMCONFIG at [mem 0xf8000000-0xfbffffff] reserved in E820
<6>[ 0.094324] PCI: Using configuration type 1 for base access
<6>[ 0.094457] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
<6>[ 0.094464] perf_event_intel: PMU erratum BJ122, BV98, HSD29 workaround disabled, HT off
<6>[ 0.102452] ACPI: Added _OSI(Module Device)
<6>[ 0.102453] ACPI: Added _OSI(Processor Device)
<6>[ 0.102454] ACPI: Added _OSI(3.0 _SCP Extensions)
<6>[ 0.102455] ACPI: Added _OSI(Processor Aggregator Device)
<4>[ 0.105924] ACPI: Executed 6 blocks of module-level executable AML code
<4>[ 0.110042] ACPI: Dynamic OEM Table Load:
<4>[ 0.110047] ACPI: SSDT 0xFFFF88011A5B5400 0003D3 (v02 HPQOEM SLIC-CPC 00003001 INTL 20051117)
<4>[ 0.110604] ACPI: Dynamic OEM Table Load:
<4>[ 0.110608] ACPI: SSDT 0xFFFF88011B016800 0005AA (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
<4>[ 0.111197] ACPI: Dynamic OEM Table Load:
<4>[ 0.111199] ACPI: SSDT 0xFFFF88011A5D7000 000119 (v02 HPQOEM SLIC-CPC 00003000 INTL 20051117)
<6>[ 0.111818] ACPI: Interpreter enabled
<4>[ 0.111825] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580)
<4>[ 0.111830] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580)
<6>[ 0.111847] ACPI: (supports S0 S3 S4 S5)
<6>[ 0.111848] ACPI: Using IOAPIC for interrupt routing
<6>[ 0.111870] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
<6>[ 0.112204] ACPI: Power Resource [PG00] (on)
<6>[ 0.112400] ACPI: Power Resource [PG01] (on)
<6>[ 0.112590] ACPI: Power Resource [PG02] (on)
<6>[ 0.114960] ACPI: Power Resource [WRST] (off)
<6>[ 0.115137] ACPI: Power Resource [WRST] (off)
<6>[ 0.115314] ACPI: Power Resource [WRST] (off)
<6>[ 0.115502] ACPI: Power Resource [WRST] (off)
<6>[ 0.115672] ACPI: Power Resource [WRST] (off)
<6>[ 0.115844] ACPI: Power Resource [WRST] (off)
<6>[ 0.116013] ACPI: Power Resource [WRST] (off)
<6>[ 0.116183] ACPI: Power Resource [WRST] (off)
<6>[ 0.118300] ACPI: Power Resource [FN00] (off)
<6>[ 0.118351] ACPI: Power Resource [FN01] (off)
<6>[ 0.118399] ACPI: Power Resource [FN02] (off)
<6>[ 0.118447] ACPI: Power Resource [FN03] (off)
<6>[ 0.118495] ACPI: Power Resource [FN04] (off)
<6>[ 0.119083] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-3e])
<6>[ 0.119088] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI]
<6>[ 0.119556] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability]
<6>[ 0.119557] acpi PNP0A08:00: FADT indicates ASPM is unsupported, using BIOS configuration
<6>[ 0.119701] acpi PNP0A08:00: host bridge window expanded to [mem 0xdf200000-0xfeafffff window]; [mem 0xfe101000-0xfe113fff window] ignored
<6>[ 0.119832] PCI host bridge to bus 0000:00
<6>[ 0.119834] pci_bus 0000:00: root bus resource [bus 00-3e]
<6>[ 0.119835] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
<6>[ 0.119836] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
<6>[ 0.119837] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
<6>[ 0.119838] pci_bus 0000:00: root bus resource [mem 0x000d0000-0x000d3fff window]
<6>[ 0.119839] pci_bus 0000:00: root bus resource [mem 0x000d4000-0x000d7fff window]
<6>[ 0.119840] pci_bus 0000:00: root bus resource [mem 0x000d8000-0x000dbfff window]
<6>[ 0.119841] pci_bus 0000:00: root bus resource [mem 0x000dc000-0x000dffff window]
<6>[ 0.119842] pci_bus 0000:00: root bus resource [mem 0x000e0000-0x000e3fff window]
<6>[ 0.119843] pci_bus 0000:00: root bus resource [mem 0x000e4000-0x000e7fff window]
<6>[ 0.119844] pci_bus 0000:00: root bus resource [mem 0xdf200000-0xfeafffff window]
<7>[ 0.119850] pci 0000:00:00.0: [8086:0c00] type 00 class 0x060000
<7>[ 0.119911] pci 0000:00:01.0: [8086:0c01] type 01 class 0x060400
<7>[ 0.119935] pci 0000:00:01.0: PME# supported from D0 D3hot D3cold
<6>[ 0.119984] pci 0000:00:01.0: System wakeup disabled by ACPI
<7>[ 0.120012] pci 0000:00:02.0: [8086:0402] type 00 class 0x030000
<7>[ 0.120022] pci 0000:00:02.0: reg 0x10: [mem 0xf7800000-0xf7bfffff 64bit]
<7>[ 0.120026] pci 0000:00:02.0: reg 0x18: [mem 0xe0000000-0xefffffff 64bit pref]
<7>[ 0.120030] pci 0000:00:02.0: reg 0x20: [io 0xf000-0xf03f]
<7>[ 0.120112] pci 0000:00:14.0: [8086:8c31] type 00 class 0x0c0330
<7>[ 0.120136] pci 0000:00:14.0: reg 0x10: [mem 0xf7d00000-0xf7d0ffff 64bit]
<7>[ 0.120179] pci 0000:00:14.0: PME# supported from D3hot D3cold
<6>[ 0.120210] pci 0000:00:14.0: System wakeup disabled by ACPI
<7>[ 0.120237] pci 0000:00:16.0: [8086:8c3a] type 00 class 0x078000
<7>[ 0.120261] pci 0000:00:16.0: reg 0x10: [mem 0xf7d15000-0xf7d1500f 64bit]
<7>[ 0.120306] pci 0000:00:16.0: PME# supported from D0 D3hot D3cold
<7>[ 0.120381] pci 0000:00:1a.0: [8086:8c2d] type 00 class 0x0c0320
<7>[ 0.120406] pci 0000:00:1a.0: reg 0x10: [mem 0xf7d13000-0xf7d133ff]
<7>[ 0.120466] pci 0000:00:1a.0: PME# supported from D0 D3hot D3cold
<6>[ 0.120498] pci 0000:00:1a.0: System wakeup disabled by ACPI
<7>[ 0.120525] pci 0000:00:1c.0: [8086:8c10] type 01 class 0x060400
<7>[ 0.120577] pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold
<6>[ 0.120632] pci 0000:00:1c.0: System wakeup disabled by ACPI
<7>[ 0.120659] pci 0000:00:1c.3: [8086:8c16] type 01 class 0x060400
<7>[ 0.120711] pci 0000:00:1c.3: PME# supported from D0 D3hot D3cold
<6>[ 0.120765] pci 0000:00:1c.3: System wakeup disabled by ACPI
<7>[ 0.120795] pci 0000:00:1d.0: [8086:8c26] type 00 class 0x0c0320
<7>[ 0.120820] pci 0000:00:1d.0: reg 0x10: [mem 0xf7d12000-0xf7d123ff]
<7>[ 0.120880] pci 0000:00:1d.0: PME# supported from D0 D3hot D3cold
<6>[ 0.120913] pci 0000:00:1d.0: System wakeup disabled by ACPI
<7>[ 0.120941] pci 0000:00:1f.0: [8086:8c5c] type 00 class 0x060100
<7>[ 0.121072] pci 0000:00:1f.2: [8086:8c02] type 00 class 0x010601
<7>[ 0.121090] pci 0000:00:1f.2: reg 0x10: [io 0xf0b0-0xf0b7]
<7>[ 0.121097] pci 0000:00:1f.2: reg 0x14: [io 0xf0a0-0xf0a3]
<7>[ 0.121104] pci 0000:00:1f.2: reg 0x18: [io 0xf090-0xf097]
<7>[ 0.121110] pci 0000:00:1f.2: reg 0x1c: [io 0xf080-0xf083]
<7>[ 0.121117] pci 0000:00:1f.2: reg 0x20: [io 0xf060-0xf07f]
<7>[ 0.121124] pci 0000:00:1f.2: reg 0x24: [mem 0xf7d11000-0xf7d117ff]
<7>[ 0.121145] pci 0000:00:1f.2: PME# supported from D3hot
<7>[ 0.121192] pci 0000:00:1f.3: [8086:8c22] type 00 class 0x0c0500
<7>[ 0.121206] pci 0000:00:1f.3: reg 0x10: [mem 0xf7d10000-0xf7d100ff 64bit]
<7>[ 0.121223] pci 0000:00:1f.3: reg 0x20: [io 0xf040-0xf05f]
<6>[ 0.121302] pci 0000:00:01.0: PCI bridge to [bus 01]
<6>[ 0.121347] pci 0000:00:1c.0: PCI bridge to [bus 02]
<7>[ 0.121407] pci 0000:03:00.0: [10ec:8168] type 00 class 0x020000
<7>[ 0.121445] pci 0000:03:00.0: reg 0x10: [io 0xe000-0xe0ff]
<7>[ 0.121472] pci 0000:03:00.0: reg 0x18: [mem 0xf7c00000-0xf7c00fff 64bit]
<7>[ 0.121488] pci 0000:03:00.0: reg 0x20: [mem 0xf0000000-0xf0003fff 64bit pref]
<7>[ 0.121545] pci 0000:03:00.0: supports D1 D2
<7>[ 0.121546] pci 0000:03:00.0: PME# supported from D0 D1 D2 D3hot D3cold
<6>[ 0.121590] pci 0000:03:00.0: System wakeup disabled by ACPI
<6>[ 0.126297] pci 0000:00:1c.3: PCI bridge to [bus 03]
<7>[ 0.126300] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
<7>[ 0.126303] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
<7>[ 0.126308] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
<6>[ 0.126957] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 10 *11 12 14 15)
<6>[ 0.126991] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
<6>[ 0.127026] ACPI: PCI Interrupt Link [LNKC] (IRQs *3 4 5 6 10 11 12 14 15)
<6>[ 0.127059] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 5 6 *10 11 12 14 15)
<6>[ 0.127090] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
<6>[ 0.127122] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
<6>[ 0.127154] ACPI: PCI Interrupt Link [LNKG] (IRQs 3 4 5 6 10 11 12 14 15) *0, disabled.
<6>[ 0.127187] ACPI: PCI Interrupt Link [LNKH] (IRQs 3 4 *5 6 10 11 12 14 15)
<4>[ 0.127396] ACPI: Enabled 6 GPEs in block 00 to 3F
<6>[ 0.127480] vgaarb: setting as boot device: PCI:0000:00:02.0
<6>[ 0.127481] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
<6>[ 0.127482] vgaarb: loaded
<6>[ 0.127483] vgaarb: bridge control possible 0000:00:02.0
<5>[ 0.127662] SCSI subsystem initialized
<7>[ 0.127693] libata version 3.00 loaded.
<6>[ 0.127708] ACPI: bus type USB registered
<6>[ 0.127721] usbcore: registered new interface driver usbfs
<6>[ 0.127728] usbcore: registered new interface driver hub
<6>[ 0.127734] usbcore: registered new device driver usb
<6>[ 0.127827] PCI: Using ACPI for IRQ routing
<7>[ 0.129079] PCI: pci_cache_line_size set to 64 bytes
<7>[ 0.129108] e820: reserve RAM buffer [mem 0x0009d800-0x0009ffff]
<7>[ 0.129109] e820: reserve RAM buffer [mem 0xc8b3c000-0xcbffffff]
<7>[ 0.129110] e820: reserve RAM buffer [mem 0xc9602000-0xcbffffff]
<7>[ 0.129110] e820: reserve RAM buffer [mem 0xdbaf7000-0xdbffffff]
<7>[ 0.129111] e820: reserve RAM buffer [mem 0x11fe00000-0x11fffffff]
<6>[ 0.129189] NetLabel: Initializing
<6>[ 0.129190] NetLabel: domain hash size = 128
<6>[ 0.129190] NetLabel: protocols = UNLABELED CIPSOv4
<6>[ 0.129199] NetLabel: unlabeled traffic allowed by default
<6>[ 0.129251] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0
<6>[ 0.129254] hpet0: 8 comparators, 64-bit 14.318180 MHz counter
<6>[ 0.131276] clocksource: Switched to clocksource hpet
<6>[ 0.135704] AppArmor: AppArmor Filesystem Enabled
<6>[ 0.135764] pnp: PnP ACPI init
<6>[ 0.135935] system 00:00: [io 0x0800-0x087f] has been reserved
<7>[ 0.135938] system 00:00: Plug and Play ACPI device, IDs PNP0c02 (active)
<7>[ 0.135957] pnp 00:01: Plug and Play ACPI device, IDs PNP0b00 (active)
<6>[ 0.135982] system 00:02: [io 0x1854-0x1857] has been reserved
<7>[ 0.135984] system 00:02: Plug and Play ACPI device, IDs INT3f0d PNP0c02 (active)
<6>[ 0.136121] system 00:03: [io 0x0a00-0x0a1f] has been reserved
<6>[ 0.136122] system 00:03: [io 0x0a20-0x0a2f] has been reserved
<6>[ 0.136123] system 00:03: [io 0x0a30-0x0a3f] has been reserved
<6>[ 0.136124] system 00:03: [io 0x0a40-0x0a7f] has been reserved
<6>[ 0.136125] system 00:03: [io 0x0a50-0x0a5f] has been reserved
<7>[ 0.136127] system 00:03: Plug and Play ACPI device, IDs PNP0c02 (active)
<6>[ 0.136174] system 00:04: [io 0x04d0-0x04d1] has been reserved
<7>[ 0.136176] system 00:04: Plug and Play ACPI device, IDs PNP0c02 (active)
<7>[ 0.136304] pnp 00:05: Plug and Play ACPI device, IDs PNP0c31 (active)
<6>[ 0.136504] system 00:06: [mem 0xfed1c000-0xfed1ffff] has been reserved
<6>[ 0.136506] system 00:06: [mem 0xfed10000-0xfed17fff] has been reserved
<6>[ 0.136507] system 00:06: [mem 0xfed18000-0xfed18fff] has been reserved
<6>[ 0.136508] system 00:06: [mem 0xfed19000-0xfed19fff] has been reserved
<6>[ 0.136509] system 00:06: [mem 0xf8000000-0xfbffffff] has been reserved
<6>[ 0.136510] system 00:06: [mem 0xfed20000-0xfed3ffff] has been reserved
<6>[ 0.136511] system 00:06: [mem 0xfed90000-0xfed93fff] has been reserved
<6>[ 0.136512] system 00:06: [mem 0xfed45000-0xfed8ffff] has been reserved
<6>[ 0.136514] system 00:06: [mem 0xff000000-0xffffffff] has been reserved
<6>[ 0.136515] system 00:06: [mem 0xfee00000-0xfeefffff] could not be reserved
<6>[ 0.136516] system 00:06: [mem 0xf7fe0000-0xf7feffff] has been reserved
<6>[ 0.136517] system 00:06: [mem 0xf7ff0000-0xf7ffffff] has been reserved
<7>[ 0.136519] system 00:06: Plug and Play ACPI device, IDs PNP0c02 (active)
<6>[ 0.136648] pnp: PnP ACPI: found 7 devices
<6>[ 0.142525] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
<7>[ 0.142541] pci 0000:00:1c.0: bridge window [io 0x1000-0x0fff] to [bus 02] add_size 1000
<7>[ 0.142542] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 02] add_size 200000 add_align 100000
<7>[ 0.142544] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff] to [bus 02] add_size 200000 add_align 100000
<7>[ 0.142552] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x000fffff] res_to_dev_res add_size 200000 min_align 100000
<7>[ 0.142553] pci 0000:00:1c.0: res[14]=[mem 0x00100000-0x002fffff] res_to_dev_res add_size 200000 min_align 100000
<7>[ 0.142554] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
<7>[ 0.142556] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x002fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
<7>[ 0.142557] pci 0000:00:1c.0: res[13]=[io 0x1000-0x0fff] res_to_dev_res add_size 1000 min_align 1000
<7>[ 0.142558] pci 0000:00:1c.0: res[13]=[io 0x1000-0x1fff] res_to_dev_res add_size 1000 min_align 1000
<6>[ 0.142562] pci 0000:00:1c.0: BAR 14: assigned [mem 0xdf200000-0xdf3fffff]
<6>[ 0.142567] pci 0000:00:1c.0: BAR 15: assigned [mem 0xdf400000-0xdf5fffff 64bit pref]
<6>[ 0.142569] pci 0000:00:1c.0: BAR 13: assigned [io 0x2000-0x2fff]
<6>[ 0.142570] pci 0000:00:01.0: PCI bridge to [bus 01]
<6>[ 0.142575] pci 0000:00:1c.0: PCI bridge to [bus 02]
<6>[ 0.142577] pci 0000:00:1c.0: bridge window [io 0x2000-0x2fff]
<6>[ 0.142581] pci 0000:00:1c.0: bridge window [mem 0xdf200000-0xdf3fffff]
<6>[ 0.142585] pci 0000:00:1c.0: bridge window [mem 0xdf400000-0xdf5fffff 64bit pref]
<6>[ 0.142590] pci 0000:00:1c.3: PCI bridge to [bus 03]
<6>[ 0.142592] pci 0000:00:1c.3: bridge window [io 0xe000-0xefff]
<6>[ 0.142596] pci 0000:00:1c.3: bridge window [mem 0xf7c00000-0xf7cfffff]
<6>[ 0.142599] pci 0000:00:1c.3: bridge window [mem 0xf0000000-0xf00fffff 64bit pref]
<7>[ 0.142605] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window]
<7>[ 0.142606] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window]
<7>[ 0.142607] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
<7>[ 0.142608] pci_bus 0000:00: resource 7 [mem 0x000d0000-0x000d3fff window]
<7>[ 0.142609] pci_bus 0000:00: resource 8 [mem 0x000d4000-0x000d7fff window]
<7>[ 0.142610] pci_bus 0000:00: resource 9 [mem 0x000d8000-0x000dbfff window]
<7>[ 0.142611] pci_bus 0000:00: resource 10 [mem 0x000dc000-0x000dffff window]
<7>[ 0.142612] pci_bus 0000:00: resource 11 [mem 0x000e0000-0x000e3fff window]
<7>[ 0.142613] pci_bus 0000:00: resource 12 [mem 0x000e4000-0x000e7fff window]
<7>[ 0.142614] pci_bus 0000:00: resource 13 [mem 0xdf200000-0xfeafffff window]
<7>[ 0.142615] pci_bus 0000:02: resource 0 [io 0x2000-0x2fff]
<7>[ 0.142616] pci_bus 0000:02: resource 1 [mem 0xdf200000-0xdf3fffff]
<7>[ 0.142617] pci_bus 0000:02: resource 2 [mem 0xdf400000-0xdf5fffff 64bit pref]
<7>[ 0.142618] pci_bus 0000:03: resource 0 [io 0xe000-0xefff]
<7>[ 0.142619] pci_bus 0000:03: resource 1 [mem 0xf7c00000-0xf7cfffff]
<7>[ 0.142620] pci_bus 0000:03: resource 2 [mem 0xf0000000-0xf00fffff 64bit pref]
<6>[ 0.142643] NET: Registered protocol family 2
<6>[ 0.142754] TCP established hash table entries: 32768 (order: 6, 262144 bytes)
<6>[ 0.142834] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)
<6>[ 0.142951] TCP: Hash tables configured (established 32768 bind 32768)
<6>[ 0.142973] UDP hash table entries: 2048 (order: 4, 65536 bytes)
<6>[ 0.142989] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)
<6>[ 0.143027] NET: Registered protocol family 1
<7>[ 0.143039] pci 0000:00:02.0: Video device with shadowed ROM
<7>[ 0.183393] PCI: CLS 64 bytes, default 64
<6>[ 0.183435] Trying to unpack rootfs image as initramfs...
<6>[ 0.568375] Freeing initrd memory: 34976K (ffff880033ba0000 - ffff880035dc8000)
<6>[ 0.568411] PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
<6>[ 0.568413] software IO TLB [mem 0xd7af7000-0xdbaf7000] (64MB) mapped at [ffff8800d7af7000-ffff8800dbaf6fff]
<6>[ 0.568470] RAPL PMU detected, API unit is 2^-32 Joules, 4 fixed counters 655360 ms ovfl timer
<6>[ 0.568471] hw unit of domain pp0-core 2^-14 Joules
<6>[ 0.568472] hw unit of domain package 2^-14 Joules
<6>[ 0.568472] hw unit of domain dram 2^-14 Joules
<6>[ 0.568473] hw unit of domain pp1-gpu 2^-14 Joules
<6>[ 0.568565] microcode: CPU0 sig=0x306c3, pf=0x2, revision=0x1d
<6>[ 0.568570] microcode: CPU1 sig=0x306c3, pf=0x2, revision=0x1d
<6>[ 0.568617] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
<6>[ 0.568673] Scanning for low memory corruption every 60 seconds
<6>[ 0.568895] futex hash table entries: 512 (order: 3, 32768 bytes)
<5>[ 0.568911] Initialise system trusted keyring
<6>[ 0.568929] audit: initializing netlink subsys (disabled)
<5>[ 0.568942] audit: type=2000 audit(1458033410.568:1): initialized
<6>[ 0.569190] HugeTLB registered 1 GB page size, pre-allocated 0 pages
<6>[ 0.569191] HugeTLB registered 2 MB page size, pre-allocated 0 pages
<6>[ 0.570111] zpool: loaded
<6>[ 0.570114] zbud: loaded
<5>[ 0.570242] VFS: Disk quotas dquot_6.6.0
<6>[ 0.570267] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
<6>[ 0.570591] fuse init (API version 7.23)
<5>[ 0.570685] Key type big_key registered
<5>[ 0.570937] Key type asymmetric registered
<5>[ 0.570940] Asymmetric key parser 'x509' registered
<6>[ 0.570950] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
<6>[ 0.570970] io scheduler noop registered
<6>[ 0.570972] io scheduler deadline registered (default)
<6>[ 0.570992] io scheduler cfq registered
<6>[ 0.571386] pcieport 0000:00:01.0: Signaling PME through PCIe PME interrupt
<7>[ 0.571389] pcie_pme 0000:00:01.0:pcie01: service driver pcie_pme loaded
<6>[ 0.571404] pcieport 0000:00:1c.0: Signaling PME through PCIe PME interrupt
<7>[ 0.571407] pcie_pme 0000:00:1c.0:pcie01: service driver pcie_pme loaded
<6>[ 0.571421] pcieport 0000:00:1c.3: Signaling PME through PCIe PME interrupt
<6>[ 0.571422] pci 0000:03:00.0: Signaling PME through PCIe PME interrupt
<7>[ 0.571426] pcie_pme 0000:00:1c.3:pcie01: service driver pcie_pme loaded
<6>[ 0.571431] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
<6>[ 0.571439] pciehp 0000:00:1c.0:pcie04: Slot #0 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ LLActRep+
<7>[ 0.571456] pciehp 0000:00:1c.0:pcie04: service driver pciehp loaded
<6>[ 0.571458] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
<6>[ 0.571479] vesafb: mode is 1920x1080x32, linelength=7680, pages=0
<6>[ 0.571480] vesafb: scrolling: redraw
<6>[ 0.571481] vesafb: Truecolor: size=8:8:8:8, shift=24:16:8:0
<6>[ 0.571488] vesafb: framebuffer at 0xe0000000, mapped to 0xffffc90000800000, using 8128k, total 8128k
<6>[ 0.571561] Console: switching to colour frame buffer device 240x67
<6>[ 0.571577] fb0: VESA VGA frame buffer device
<7>[ 0.571589] intel_idle: MWAIT substates: 0x2120
<7>[ 0.571590] intel_idle: v0.4 model 0x3C
<7>[ 0.571590] intel_idle: lapic_timer_reliable_states 0xffffffff
<6>[ 0.571713] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
<6>[ 0.571716] ACPI: Power Button [PWRB]
<6>[ 0.571740] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1
<6>[ 0.571742] ACPI: Sleep Button [SLPB]
<6>[ 0.571765] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2
<6>[ 0.571766] ACPI: Power Button [PWRF]
<6>[ 0.572243] thermal LNXTHERM:00: registered as thermal_zone0
<6>[ 0.572245] ACPI: Thermal Zone [TZ00] (28 C)
<6>[ 0.572366] thermal LNXTHERM:01: registered as thermal_zone1
<6>[ 0.572367] ACPI: Thermal Zone [TZ01] (30 C)
<6>[ 0.572411] GHES: HEST is not enabled!
<6>[ 0.572467] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
<6>[ 0.573557] Linux agpgart interface v0.103
<6>[ 0.647751] tpm_tis 00:05: 1.2 TPM (device-id 0xB, rev-id 16)
<6>[ 0.937858] brd: module loaded
<6>[ 0.938377] loop: module loaded
<6>[ 0.938514] libphy: Fixed MDIO Bus: probed
<6>[ 0.938516] tun: Universal TUN/TAP device driver, 1.6
<6>[ 0.938516] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
<6>[ 0.938543] PPP generic driver version 2.4.2
<6>[ 0.938661] xhci_hcd 0000:00:14.0: xHCI Host Controller
<6>[ 0.938665] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 1
<6>[ 0.938742] xhci_hcd 0000:00:14.0: hcc params 0x200077c1 hci version 0x100 quirks 0x00009810
<7>[ 0.938747] xhci_hcd 0000:00:14.0: cache line size of 64 is not supported
<6>[ 0.938813] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
<6>[ 0.938814] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
<6>[ 0.938815] usb usb1: Product: xHCI Host Controller
<6>[ 0.938816] usb usb1: Manufacturer: Linux 4.2.0-16-generic xhci-hcd
<6>[ 0.938817] usb usb1: SerialNumber: 0000:00:14.0
<6>[ 0.938890] hub 1-0:1.0: USB hub found
<6>[ 0.938900] hub 1-0:1.0: 10 ports detected
<6>[ 0.940551] xhci_hcd 0000:00:14.0: xHCI Host Controller
<6>[ 0.940553] xhci_hcd 0000:00:14.0: new USB bus registered, assigned bus number 2
<6>[ 0.940575] usb usb2: New USB device found, idVendor=1d6b, idProduct=0003
<6>[ 0.940576] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
<6>[ 0.940577] usb usb2: Product: xHCI Host Controller
<6>[ 0.940578] usb usb2: Manufacturer: Linux 4.2.0-16-generic xhci-hcd
<6>[ 0.940579] usb usb2: SerialNumber: 0000:00:14.0
<6>[ 0.940657] hub 2-0:1.0: USB hub found
<6>[ 0.940662] hub 2-0:1.0: 2 ports detected
<6>[ 0.941069] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
<6>[ 0.941073] ehci-pci: EHCI PCI platform driver
<6>[ 0.941134] ehci-pci 0000:00:1a.0: EHCI Host Controller
<6>[ 0.941137] ehci-pci 0000:00:1a.0: new USB bus registered, assigned bus number 3
<6>[ 0.941146] ehci-pci 0000:00:1a.0: debug port 2
<7>[ 0.945032] ehci-pci 0000:00:1a.0: cache line size of 64 is not supported
<6>[ 0.945039] ehci-pci 0000:00:1a.0: irq 16, io mem 0xf7d13000
<6>[ 0.959985] ehci-pci 0000:00:1a.0: USB 2.0 started, EHCI 1.00
<6>[ 0.960014] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002
<6>[ 0.960015] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
<6>[ 0.960016] usb usb3: Product: EHCI Host Controller
<6>[ 0.960017] usb usb3: Manufacturer: Linux 4.2.0-16-generic ehci_hcd
<6>[ 0.960018] usb usb3: SerialNumber: 0000:00:1a.0
<6>[ 0.960141] hub 3-0:1.0: USB hub found
<6>[ 0.960145] hub 3-0:1.0: 2 ports detected
<6>[ 0.960279] ehci-pci 0000:00:1d.0: EHCI Host Controller
<6>[ 0.960283] ehci-pci 0000:00:1d.0: new USB bus registered, assigned bus number 4
<6>[ 0.960292] ehci-pci 0000:00:1d.0: debug port 2
<7>[ 0.964180] ehci-pci 0000:00:1d.0: cache line size of 64 is not supported
<6>[ 0.964187] ehci-pci 0000:00:1d.0: irq 23, io mem 0xf7d12000
<6>[ 0.976001] ehci-pci 0000:00:1d.0: USB 2.0 started, EHCI 1.00
<6>[ 0.976030] usb usb4: New USB device found, idVendor=1d6b, idProduct=0002
<6>[ 0.976031] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
<6>[ 0.976032] usb usb4: Product: EHCI Host Controller
<6>[ 0.976033] usb usb4: Manufacturer: Linux 4.2.0-16-generic ehci_hcd
<6>[ 0.976034] usb usb4: SerialNumber: 0000:00:1d.0
<6>[ 0.976153] hub 4-0:1.0: USB hub found
<6>[ 0.976157] hub 4-0:1.0: 2 ports detected
<6>[ 0.976235] ehci-platform: EHCI generic platform driver
<6>[ 0.976242] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
<6>[ 0.976245] ohci-pci: OHCI PCI platform driver
<6>[ 0.976251] ohci-platform: OHCI generic platform driver
<6>[ 0.976256] uhci_hcd: USB Universal Host Controller Interface driver
<6>[ 0.976291] i8042: PNP: No PS/2 controller found. Probing ports directly.
<6>[ 0.976706] serio: i8042 KBD port at 0x60,0x64 irq 1
<6>[ 0.976710] serio: i8042 AUX port at 0x60,0x64 irq 12
<6>[ 0.976911] mousedev: PS/2 mouse device common for all mice
<6>[ 0.977191] rtc_cmos 00:01: RTC can wake from S4
<6>[ 0.977296] rtc_cmos 00:01: rtc core: registered rtc_cmos as rtc0
<6>[ 0.977319] rtc_cmos 00:01: alarms up to one month, y3k, 242 bytes nvram, hpet irqs
<6>[ 0.977325] i2c /dev entries driver
<6>[ 0.977376] device-mapper: uevent: version 1.0.3
<6>[ 0.977433] device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com
<6>[ 0.977445] Intel P-state driver initializing.
<6>[ 0.977533] ledtrig-cpu: registered to indicate activity on CPUs
<4>[ 0.977799] PCCT header not found.
<6>[ 0.978299] NET: Registered protocol family 10
<6>[ 0.978721] NET: Registered protocol family 17
<5>[ 0.978748] Key type dns_resolver registered
<5>[ 0.979451] Loading compiled-in X.509 certificates
<5>[ 0.981717] Loaded X.509 cert 'Build time autogenerated kernel key: 6a1c9c21f04ab86fd1d7ced6ca113540fc8e35b6'
<6>[ 0.981754] registered taskstats version 1
<6>[ 0.981805] zswap: loading zswap
<6>[ 0.981810] zswap: using zbud pool
<6>[ 0.981820] zswap: using lzo compressor
<5>[ 0.984586] Key type trusted registered
<5>[ 0.986552] Key type encrypted registered
<6>[ 0.986558] AppArmor: AppArmor sha1 policy hashing enabled
<6>[ 1.252224] usb 1-1: new low-speed USB device number 2 using xhci_hcd
<6>[ 1.272241] usb 3-1: new high-speed USB device number 2 using ehci-pci
<6>[ 1.288251] usb 4-1: new high-speed USB device number 2 using ehci-pci
<6>[ 1.383961] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 1.383972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 1.383973] usb 1-1: Product: HP USB Optical Mouse
<6>[ 1.383974] usb 1-1: Manufacturer: PixArt
<4>[ 1.384084] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 1.404752] usb 3-1: New USB device found, idVendor=8087, idProduct=8008
<6>[ 1.404754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
<6>[ 1.405033] hub 3-1:1.0: USB hub found
<6>[ 1.405131] hub 3-1:1.0: 4 ports detected
<6>[ 1.420765] usb 4-1: New USB device found, idVendor=8087, idProduct=8000
<6>[ 1.420768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
<6>[ 1.421045] hub 4-1:1.0: USB hub found
<6>[ 1.421143] hub 4-1:1.0: 6 ports detected
<6>[ 1.496418] usb 1-2: new low-speed USB device number 3 using xhci_hcd
<6>[ 1.568478] tsc: Refined TSC clocksource calibration: 3192.607 MHz
<6>[ 1.568480] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x2e0501eb3d1, max_idle_ns: 440795254769 ns
<6>[ 1.629887] usb 1-2: New USB device found, idVendor=0461, idProduct=0010
<6>[ 1.629890] usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 1.629891] usb 1-2: Product: USB Keyboard
<6>[ 1.629892] usb 1-2: Manufacturer: NOVATEK
<4>[ 1.630022] usb 1-2: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<4>[ 1.630025] usb 1-2: ep 0x82 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 1.704646] evm: HMAC attrs: 0x1
<6>[ 1.704966] Magic number: 8:779:272
<6>[ 1.705075] rtc_cmos 00:01: setting system clock to 2016-03-15 09:16:52 UTC (1458033412)
<6>[ 1.705108] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
<6>[ 1.705108] EDD information not available.
<7>[ 1.705164] PM: Hibernation image not present or could not be loaded.
<6>[ 1.705380] Freeing unused kernel memory: 1460K (ffffffff81d37000 - ffffffff81ea4000)
<6>[ 1.705381] Write protecting the kernel read-only data: 12288k
<6>[ 1.705491] Freeing unused kernel memory: 36K (ffff8800017f7000 - ffff880001800000)
<6>[ 1.705543] Freeing unused kernel memory: 296K (ffff880001bb6000 - ffff880001c00000)
<5>[ 1.717786] random: systemd-udevd urandom read with 4 bits of entropy available
<6>[ 1.746626] hidraw: raw HID events driver (C) Jiri Kosina
<6>[ 1.758355] [drm] Initialized drm 1.1.0 20060810
<6>[ 1.758467] usbcore: registered new interface driver usbhid
<6>[ 1.758468] usbhid: USB HID core driver
<6>[ 1.765791] wmi: Mapper loaded
<6>[ 1.770126] r8169 Gigabit Ethernet driver 2.3LK-NAPI loaded
<4>[ 1.770138] r8169 0000:03:00.0: can't disable ASPM; OS doesn't have ASPM control
<6>[ 1.773502] [drm] Memory usable by graphics device = 2048M
<7>[ 1.773505] checking generic (e0000000 7f0000) vs hw (e0000000 10000000)
<6>[ 1.773506] fb: switching to inteldrmfb from VESA VGA
<6>[ 1.773529] Console: switching to colour dummy device 80x25
<6>[ 1.773873] [drm] Replacing VGA console driver
<6>[ 1.778413] r8169 0000:03:00.0 eth0: RTL8168g/8111g at 0xffffc9000001e000, 48:0f:cf:36:52:2a, XID 0c000800 IRQ 28
<6>[ 1.778415] r8169 0000:03:00.0 eth0: jumbo features [frames: 9200 bytes, tx checksumming: ko]
<6>[ 1.784200] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
<6>[ 1.784203] [drm] Driver supports precise vblank timestamp query.
<6>[ 1.784300] vgaarb: device changed decodes: PCI:0000:00:02.0,olddecodes=io+mem,decodes=io+mem:owns=io+mem
<6>[ 1.791085] ACPI: Video Device [GFX0] (multi-head: yes rom: no post: no)
<6>[ 1.791226] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input6
<6>[ 1.791293] [drm] Initialized i915 1.6.0 20150522 for 0000:00:02.0 on minor 0
<7>[ 1.791314] ahci 0000:00:1f.2: version 3.0
<6>[ 1.791435] ahci 0000:00:1f.2: AHCI 0001.0300 32 slots 4 ports 6 Gbps 0x11 impl SATA mode
<6>[ 1.791438] ahci 0000:00:1f.2: flags: 64bit ncq pm led clo pio slum part ems
<6>[ 1.797758] scsi host0: ahci
<6>[ 1.797821] scsi host1: ahci
<6>[ 1.797868] scsi host2: ahci
<6>[ 1.797912] scsi host3: ahci
<6>[ 1.797955] scsi host4: ahci
<6>[ 1.797981] ata1: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11100 irq 30
<6>[ 1.797982] ata2: DUMMY
<6>[ 1.797983] ata3: DUMMY
<6>[ 1.797984] ata4: DUMMY
<6>[ 1.797986] ata5: SATA max UDMA/133 abar m2048@0xf7d11000 port 0xf7d11300 irq 30
<6>[ 1.813022] fbcon: inteldrmfb (fb0) is primary device
<6>[ 1.813071] Console: switching to colour frame buffer device 240x67
<6>[ 1.813088] i915 0000:00:02.0: fb0: inteldrmfb frame buffer device
<6>[ 1.813089] i915 0000:00:02.0: registered panic notifier
<6>[ 1.821832] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0001/input/input7
<6>[ 1.822499] r8169 0000:03:00.0 enp3s0: renamed from eth0
<6>[ 1.823098] hid-generic 0003:03F0:094A.0001: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 1.823195] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2:1.0/0003:0461:0010.0002/input/input8
<6>[ 1.876870] hid-generic 0003:0461:0010.0002: input,hidraw1: USB HID v1.10 Keyboard [NOVATEK USB Keyboard] on usb-0000:00:14.0-2/input0
<6>[ 1.877755] input: NOVATEK USB Keyboard as /devices/pci0000:00/0000:00:14.0/usb1/1-2/1-2:1.1/0003:0461:0010.0003/input/input9
<6>[ 1.932926] hid-generic 0003:0461:0010.0003: input,hidraw2: USB HID v1.10 Device [NOVATEK USB Keyboard] on usb-0000:00:14.0-2/input1
<6>[ 2.116931] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
<6>[ 2.116949] ata5: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
<6>[ 2.118032] ata1.00: ATA-8: WDC WD5000AAKX-60U6AA0, 18.01H18, max UDMA/100
<6>[ 2.118035] ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA
<6>[ 2.119560] ata1.00: configured for UDMA/100
<5>[ 2.119732] scsi 0:0:0:0: Direct-Access ATA WDC WD5000AAKX-6 1H18 PQ: 0 ANSI: 5
<5>[ 2.119934] sd 0:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/465 GiB)
<5>[ 2.119955] sd 0:0:0:0: Attached scsi generic sg0 type 0
<5>[ 2.119976] sd 0:0:0:0: [sda] Write Protect is off
<7>[ 2.119977] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
<5>[ 2.119990] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
<6>[ 2.120168] ata5.00: ATAPI: hp DVD A DH16AFSH, DHH6, max UDMA/133
<6>[ 2.121190] ata5.00: configured for UDMA/133
<5>[ 2.123519] scsi 4:0:0:0: CD-ROM hp DVD A DH16AFSH DHH6 PQ: 0 ANSI: 5
<6>[ 2.131651] sda: sda1 sda2 < sda5 >
<5>[ 2.132009] sd 0:0:0:0: [sda] Attached SCSI disk
<6>[ 2.144156] sr 4:0:0:0: [sr0] scsi3-mmc drive: 40x/40x writer dvd-ram cd/rw xa/form2 cdda tray
<6>[ 2.144159] cdrom: Uniform CD-ROM driver Revision: 3.20
<7>[ 2.144234] sr 4:0:0:0: Attached scsi CD-ROM sr0
<5>[ 2.144264] sr 4:0:0:0: Attached scsi generic sg1 type 5
<6>[ 2.569302] clocksource: Switched to clocksource tsc
<6>[ 62.038308] usb 1-1: USB disconnect, device number 2
<6>[ 63.546475] usb 1-1: new low-speed USB device number 4 using xhci_hcd
<6>[ 63.678162] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 63.678164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 63.678166] usb 1-1: Product: HP USB Optical Mouse
<6>[ 63.678167] usb 1-1: Manufacturer: PixArt
<4>[ 63.678304] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 63.680283] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0004/input/input10
<6>[ 63.680477] hid-generic 0003:03F0:094A.0004: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 123.792223] usb 1-1: USB disconnect, device number 4
<6>[ 125.300296] usb 1-1: new low-speed USB device number 5 using xhci_hcd
<6>[ 125.432040] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 125.432042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 125.432044] usb 1-1: Product: HP USB Optical Mouse
<6>[ 125.432045] usb 1-1: Manufacturer: PixArt
<4>[ 125.432189] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 125.433940] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0005/input/input11
<6>[ 125.434002] hid-generic 0003:03F0:094A.0005: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 185.546098] usb 1-1: USB disconnect, device number 5
<6>[ 187.054119] usb 1-1: new low-speed USB device number 6 using xhci_hcd
<6>[ 187.185882] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 187.185884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 187.185885] usb 1-1: Product: HP USB Optical Mouse
<6>[ 187.185886] usb 1-1: Manufacturer: PixArt
<4>[ 187.186025] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 187.188059] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0006/input/input12
<6>[ 187.188307] hid-generic 0003:03F0:094A.0006: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 247.291968] usb 1-1: USB disconnect, device number 6
<6>[ 248.799931] usb 1-1: new low-speed USB device number 7 using xhci_hcd
<6>[ 248.931787] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 248.931789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 248.931790] usb 1-1: Product: HP USB Optical Mouse
<6>[ 248.931791] usb 1-1: Manufacturer: PixArt
<4>[ 248.931932] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 248.934015] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0007/input/input13
<6>[ 248.934187] hid-generic 0003:03F0:094A.0007: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 309.037838] usb 1-1: USB disconnect, device number 7
<6>[ 310.545745] usb 1-1: new low-speed USB device number 8 using xhci_hcd
<6>[ 310.677461] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 310.677462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 310.677464] usb 1-1: Product: HP USB Optical Mouse
<6>[ 310.677465] usb 1-1: Manufacturer: PixArt
<4>[ 310.677601] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 310.679554] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0008/input/input14
<6>[ 310.679805] hid-generic 0003:03F0:094A.0008: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 370.783709] usb 1-1: USB disconnect, device number 8
<6>[ 372.291561] usb 1-1: new low-speed USB device number 9 using xhci_hcd
<6>[ 372.423340] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 372.423351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 372.423353] usb 1-1: Product: HP USB Optical Mouse
<6>[ 372.423354] usb 1-1: Manufacturer: PixArt
<4>[ 372.423504] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 372.425432] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.0009/input/input15
<6>[ 372.425586] hid-generic 0003:03F0:094A.0009: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<5>[ 427.460486] random: nonblocking pool is initialized
<6>[ 432.529572] usb 1-1: USB disconnect, device number 9
<6>[ 434.037375] usb 1-1: new low-speed USB device number 10 using xhci_hcd
<6>[ 434.169057] usb 1-1: New USB device found, idVendor=03f0, idProduct=094a
<6>[ 434.169059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
<6>[ 434.169061] usb 1-1: Product: HP USB Optical Mouse
<6>[ 434.169062] usb 1-1: Manufacturer: PixArt
<4>[ 434.169155] usb 1-1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
<6>[ 434.170858] input: PixArt HP USB Optical Mouse as /devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1:1.0/0003:03F0:094A.000A/input/input16
<6>[ 434.170920] hid-generic 0003:03F0:094A.000A: input,hidraw0: USB HID v1.11 Mouse [PixArt HP USB Optical Mouse] on usb-0000:00:14.0-1/input0
<6>[ 454.417894] NET: Registered protocol family 38
<6>[ 472.630604] EXT4-fs (dm-1): mounted filesystem with ordered data mode. Opts: (null)
<28>[ 473.978841] systemd[1]: Failed to insert module 'kdbus': Function not implemented
<30>[ 474.139970] systemd[1]: systemd 225 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD -IDN)
<30>[ 474.140056] systemd[1]: Detected architecture x86-64.
<30>[ 474.153904] systemd[1]: Set hostname to <admin-H>.
<30>[ 474.546056] systemd[1]: Created slice Root Slice.
<30>[ 474.546121] systemd[1]: Listening on udev Control Socket.
<30>[ 474.546142] systemd[1]: Listening on Journal Socket (/dev/log).
<30>[ 474.546156] systemd[1]: Listening on fsck to fsckd communication Socket.
<30>[ 474.546211] systemd[1]: Created slice User and Session Slice.
<30>[ 474.546228] systemd[1]: Listening on udev Kernel Socket.
<30>[ 474.546275] systemd[1]: Created slice System Slice.
<30>[ 474.546326] systemd[1]: Created slice system-getty.slice.
<30>[ 474.546642] systemd[1]: Starting Increase datagram queue length...
<30>[ 474.546670] systemd[1]: Reached target Slices.
<30>[ 474.546701] systemd[1]: Listening on /dev/initctl Compatibility Named Pipe.
<30>[ 474.546739] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
<30>[ 474.546751] systemd[1]: Reached target Remote File Systems (Pre).
<30>[ 474.546781] systemd[1]: Listening on LVM2 poll daemon socket.
<30>[ 474.546887] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.
<30>[ 474.546914] systemd[1]: Listening on Device-mapper event daemon FIFOs.
<30>[ 474.546930] systemd[1]: Reached target User and Group Name Lookups.
<30>[ 474.547012] systemd[1]: Created slice system-systemd\x2dfsck.slice.
<30>[ 474.547040] systemd[1]: Listening on Journal Socket.
<30>[ 474.547322] systemd[1]: Mounting POSIX Message Queue File System...
<30>[ 474.684569] systemd[1]: Starting Load Kernel Modules...
<30>[ 474.684940] systemd[1]: Started Read required files in advance.
<30>[ 474.685518] systemd[1]: Mounting Huge Pages File System...
<30>[ 474.685883] systemd[1]: Starting Create list of required static device nodes for the current kernel...
<30>[ 474.686334] systemd[1]: Starting Uncomplicated firewall...
<30>[ 474.686746] systemd[1]: Started Braille Device Support.
<30>[ 474.687812] systemd[1]: Starting udev Coldplug all Devices...
<30>[ 474.688318] systemd[1]: Mounting Debug File System...
<30>[ 474.688612] systemd[1]: Starting Setup Virtual Console...
<30>[ 474.688666] systemd[1]: Listening on LVM2 metadata daemon socket.
<30>[ 474.689083] systemd[1]: Starting Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling...
<30>[ 474.689140] systemd[1]: Listening on Journal Audit Socket.
<30>[ 474.997305] systemd[1]: Created slice system-systemd\x2dcryptsetup.slice.
<30>[ 474.997996] systemd[1]: Started Create list of required static device nodes for the current kernel.
<30>[ 474.998430] systemd[1]: Started Setup Virtual Console.
<30>[ 475.001314] systemd[1]: Starting Create Static Device Nodes in /dev...
<30>[ 475.026807] systemd[1]: Started udev Coldplug all Devices.
<30>[ 475.120785] systemd[1]: Mounted Debug File System.
<30>[ 475.120837] systemd[1]: Mounted POSIX Message Queue File System.
<30>[ 475.120867] systemd[1]: Mounted Huge Pages File System.
<30>[ 475.121023] systemd[1]: Started Increase datagram queue length.
<30>[ 475.124340] systemd[1]: Listening on Syslog Socket.
<30>[ 475.124705] systemd[1]: Starting Journal Service...
<6>[ 475.233032] lp: driver loaded but no devices found
<6>[ 475.247425] ppdev: user-space parallel port driver
<30>[ 475.292966] systemd[1]: Started Load Kernel Modules.
<30>[ 475.293440] systemd[1]: Starting Apply Kernel Variables...
<30>[ 475.293791] systemd[1]: Mounting FUSE Control File System...
<30>[ 475.296087] systemd[1]: Mounted FUSE Control File System.
<6>[ 475.352486] ip_tables: (C) 2000-2006 Netfilter Core Team
<6>[ 475.393607] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
<30>[ 475.495803] systemd[1]: Started Journal Service.
<6>[ 475.508367] ip6_tables: (C) 2000-2006 Netfilter Core Team
<6>[ 478.508295] EXT4-fs (dm-1): re-mounted. Opts: errors=remount-ro
<6>[ 478.758644] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
<46>[ 478.843932] systemd-journald[437]: Received request to flush runtime journal from PID 1
<4>[ 479.260292] kvm: disabled by bios
<4>[ 479.302151] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
<4>[ 479.302155] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302161] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302185] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
<4>[ 479.302187] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302190] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302211] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
<4>[ 479.302212] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302215] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<6>[ 479.302254] input: HP WMI hotkeys as /devices/virtual/input/input17
<4>[ 479.302740] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
<4>[ 479.302743] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302747] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302769] ACPI Error: Field [D128] at 1152 exceeds Buffer [NULL] size 160 (bits) (20150619/dsopcode-236)
<4>[ 479.302771] ACPI Error: Method parse/execution failed [\HWMC] (Node ffff88011b0befa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<4>[ 479.302774] ACPI Error: Method parse/execution failed [\_SB_.WMID.WMAA] (Node ffff88011b0c1fa0), AE_AML_BUFFER_LIMIT (20150619/psparse-536)
<6>[ 480.200523] intel_rapl: Found RAPL domain package
<6>[ 480.200526] intel_rapl: Found RAPL domain core
<6>[ 480.200527] intel_rapl: Found RAPL domain uncore
<6>[ 480.200528] intel_rapl: Found RAPL domain dram
<6>[ 487.850441] Adding 4115964k swap on /dev/mapper/cryptswap1. Priority:-1 extents:1 across:4115964k FS
<6>[ 492.591832] EXT4-fs (sda1): mounting ext2 file system using the ext4 subsystem
<6>[ 492.661255] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null)
<5>[ 497.478978] audit: type=1400 audit(1458033907.867:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session" pid=735 comm="apparmor_parser"
<5>[ 497.478985] audit: type=1400 audit(1458033907.867:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="chromium" pid=735 comm="apparmor_parser"
<5>[ 497.525022] audit: type=1400 audit(1458033907.915:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=735 comm="apparmor_parser"
<5>[ 497.525028] audit: type=1400 audit(1458033907.915:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=735 comm="apparmor_parser"
<5>[ 497.525031] audit: type=1400 audit(1458033907.915:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=735 comm="apparmor_parser"
<5>[ 497.525034] audit: type=1400 audit(1458033907.915:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=735 comm="apparmor_parser"
<5>[ 497.556986] audit: type=1400 audit(1458033907.947:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince" pid=735 comm="apparmor_parser"
<5>[ 497.556994] audit: type=1400 audit(1458033907.947:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=735 comm="apparmor_parser"
<5>[ 497.556998] audit: type=1400 audit(1458033907.947:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/evince-previewer" pid=735 comm="apparmor_parser"
<5>[ 497.557002] audit: type=1400 audit(1458033907.947:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="sanitized_helper" pid=735 comm="apparmor_parser"
<4>[ 498.136316] cgroup: new mount options do not match the existing superblock, will be ignored
<6>[ 502.240545] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
<6>[ 502.447098] r8169 0000:03:00.0 enp3s0: link down
<6>[ 502.447126] IPv6: ADDRCONF(NETDEV_UP): enp3s0: link is not ready
<6>[ 932.201331] r8169 0000:03:00.0 enp3s0: link up
<6>[ 932.201339] IPv6: ADDRCONF(NETDEV_CHANGE): enp3s0: link becomes ready
<4>[ 932.692793] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=597 DF PROTO=2
<4>[ 1042.808500] ICMPv6: process `grep' is using deprecated sysctl (syscall) net.ipv6.neigh.default.base_reachable_time - use net.ipv6.neigh.default.base_reachable_time_ms instead
<4>[ 1042.926003] nr_pdflush_threads exported in /proc is scheduled for removal
<4>[ 1057.795539] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=2518 DF PROTO=2
<4>[ 1182.898205] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=9116 DF PROTO=2
<4>[ 1308.000475] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=19778 DF PROTO=2
<4>[ 1433.102744] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=30173 DF PROTO=2
<4>[ 1558.205356] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=41896 DF PROTO=2
<4>[ 1683.307272] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=52400 DF PROTO=2
<4>[ 1808.409133] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=53754 DF PROTO=2
<4>[ 1933.511182] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=55851 DF PROTO=2
<4>[ 2058.613349] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=64376 DF PROTO=2
<4>[ 2183.715453] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=65526 DF PROTO=2
<4>[ 2308.817432] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=3377 DF PROTO=2
<4>[ 2433.919308] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=6864 DF PROTO=2
<4>[ 2559.021460] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=18349 DF PROTO=2
<4>[ 2684.124178] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=20562 DF PROTO=2
<4>[ 2809.226337] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=28237 DF PROTO=2
<4>[ 2934.328174] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=33046 DF PROTO=2
<4>[ 3059.430483] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:c8:0e:14:d8:47:41:08:00 SRC=192.168.178.1 DST=224.0.0.1 LEN=36 TOS=0x00 PREC=0xC0 TTL=1 ID=41547 DF PROTO=2
|
|
15.03.2016, 12:28
| #14 |
| /// TB-Senior | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR Warum denkst du, dass diese Sachen unnormal sind? Hast du da irgendwelche Quellen dazu? Dass die Netzwerk-Interfaces nicht mehr eth0 und wlan0 heißen, sondern eher kryptische Namen haben, ist z.B. laut diesem Link ganz normal: https://www.freedesktop.org/wiki/Sof...nterfaceNames/
__________________ Zum Schutz vor Trojanerinnen und Femaleware ist bei einem aktuellen Windows 10 die Windows-Defenderin ausreichend. |
|
15.03.2016, 16:13
| #15 | |
| /// Winkelfunktion /// TB-Süch-Tiger™  | Linux: Bootkit Nemesis- Bios/Firmware Malware im VBRZitat:
 Not sure if stupid or trolling... 
__________________ Logfiles bitte immer in CODE-Tags posten  |
 |
| Themen zu Linux: Bootkit Nemesis- Bios/Firmware Malware im VBR |
| required |
cie01: service driver pcie_pme loaded
wns=io+mem
Linear-Darstellung
