type=AVC msg=audit(1251298915.599:302): avc:  denied  { execute } for  
  pid=4160 
  comm="sh" 
  name="ntlm_auth" 
  dev=hda3 
  ino=26621123 
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:winbind_helper_exec_t:s0 tclass=file
type=AVC msg=audit(1251298915.599:302): avc:  denied  { execute_no_trans } for  
  pid=4160 
  comm="sh" 
  path="/usr/bin/ntlm_auth" 
  dev=hda3 
  ino=26621123 
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:winbind_helper_exec_t:s0 tclass=file
type=AVC msg=audit(1251298915.599:302): avc:  denied  { read } for  
  pid=4160 
  comm="sh" 
  path="/usr/bin/ntlm_auth" 
  dev=hda3 
  ino=26621123 
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:winbind_helper_exec_t:s0 tclass=file
type=SYSCALL msg=audit(1251298915.599:302): 
  arch=40000003 
  syscall=11 
  success=yes 
  exit=0 
  a0=9f9d020 
  a1=9f9c610 
  a2=9f9c3c0 
  a3=40 
  items=0 
  ppid=4156 
  pid=4160 
  auid=4294967295 
  uid=0 
  gid=0 
  euid=0 
  suid=0 
  fsuid=0 
  egid=0 
  sgid=0 
  fsgid=0 
  tty=(none)
  ses=4294967295
  comm="ntlm_auth"
  exe="/usr/bin/ntlm_auth"
  subj=system_u:system_r:pppd_t:s0 key=(null)
type=AVC msg=audit(1251298915.604:303): avc:  denied  { search } for  
  pid=4160
  comm="ntlm_auth"
  name="samba"
  dev=hda3
  ino=14189940
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:samba_etc_t:s0 tclass=dir
type=AVC msg=audit(1251298915.604:303): avc:  denied  { getattr } for  
  pid=4160
  comm="ntlm_auth"
  path="/etc/samba/smb.conf"
  dev=hda3
  ino=14189942
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:samba_etc_t:s0 tclass=file
type=SYSCALL msg=audit(1251298915.604:303):
  arch=40000003
  syscall=195
  success=yes
  exit=0
  a0=bf9f8138
  a1=bf9f7c64
  a2=9faff4
  a3=bf9f7c64
  items=0
  ppid=4156
  pid=4160
  auid=4294967295
  uid=0
  gid=0
  euid=0
  suid=0
  fsuid=0
  egid=0
  sgid=0
  fsgid=0
  tty=(none)
  ses=4294967295
  comm="ntlm_auth"
  exe="/usr/bin/ntlm_auth"
  subj=system_u:system_r:pppd_t:s0 key=(null)
type=AVC msg=audit(1251298915.604:304): avc:  denied  { read } for  
  pid=4160
  comm="ntlm_auth"
  name="smb.conf"
  dev=hda3
  ino=14189942
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:samba_etc_t:s0 tclass=file
type=SYSCALL msg=audit(1251298915.604:304):
  arch=40000003
  syscall=5
  success=yes
  exit=3
  a0=bf9f8138
  a1=8000
  a2=0
  a3=8000
  items=0 
  ppid=4156
  pid=4160
  auid=4294967295
  uid=0 
  gid=0
  euid=0
  suid=0
  fsuid=0
  egid=0
  sgid=0
  fsgid=0
  tty=(none)
  ses=4294967295
  comm="ntlm_auth"
  exe="/usr/bin/ntlm_auth"
  subj=system_u:system_r:pppd_t:s0 key=(null)
type=AVC msg=audit(1251298917.591:305): avc:  denied  { write } for  
  pid=4156 
  comm="pppd" 
  name="wtmp" 
  dev=hda3 
  ino=14451038 
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:wtmp_t:s0 tclass=file
type=SYSCALL msg=audit(1251298917.591:305):
  arch=40000003
  syscall=5
  success=yes
  exit=12
  a0=3f1354
  a1=8001
  a2=0
  a3=3f1362
  items=0 
  ppid=4155 
  pid=4156
  auid=4294967295
  uid=0
  gid=0
  euid=0 
  suid=0
  fsuid=0
  egid=0
  sgid=0
  fsgid=0
  tty=(none)
  ses=4294967295
  comm="pppd"
  exe="/usr/sbin/pppd"
  subj=system_u:system_r:pppd_t:s0 key=(null)

type=AVC msg=audit(1251298915.599:302): avc:  denied  { execute } for  
  pid=4160 
  comm="sh" 
  name="ntlm_auth" 
  dev=hda3 
  ino=26621123 
  scontext=system_u:system_r:pppd_t:s0 
  tcontext=system_u:object_r:winbind_helper_exec_t:s0 tclass=file

#setenforce 0

#grep pppd /var/log/audit/audit.log | audit2allow -M pppdntlm
#semodule -i myinsmod.pp
#setenforce 1