Comment # 12 on bug 984330 from Mindaugas Baranauskas

Created attachment 682028 [details]
audit.log files at various time points

I did steps again in VirtualBox. New lines after "flags=(attach_disconnected)"
added :

type=SERVICE_START msg=audit(1466764408.510:787): pid=1 uid=0 auid=4294967295
ses=4294967295 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd"
hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1466764412.678:788): pid=1 uid=0 auid=4294967295
ses=4294967295 msg=' comm="nscd" exe="/usr/lib/systemd/systemd" hostname=?
addr=? terminal=? res=success'