<14>Apr 10 12:03:11 localhost audispd: node=localhost.localdomain type=USER_AUTH msg=audit(1491804191.470:1333): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_permit acct="gdm" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success'