952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 LUY (ECDSA) SSH[ 155.800359] audit: type=1300 audit(1707506949.378:1369): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e9f380 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) host key: SHA25[ 155.808164] audit: type=1327 audit(1707506949.378:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 6:GtCGpCIRp66e39O1x/pY4sYiPVoVmNpf4w9uAF7vd0M (R[ 155.816238] audit: type=1400 audit(1707506949.381:1370): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 SA) SSH host key: SHA256:OLI8nR[ 155.825643] audit: type=1300 audit(1707506949.381:1370): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e9f800 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) YPN9lzCmU2ubdQjCqBM+DwLMUi6h1THNmkA+E (ED25519) eth0: 172.31.21.113 fe80::4f5:b3ff:fe2d:db9f ip-172-31-21-113 login: [ 155.838295] audit: type=1327 audit(1707506949.381:1370): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 155.845852] audit: type=1400 audit(1707506949.444:1371): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 165.592661] kauditd_printk_skb: 108 callbacks suppressed [ 165.592664] audit: type=1130 audit(1707506959.200:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.113:22-139.178.68.195:50546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.832914] audit: type=1101 audit(1707506959.440:1399): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.840048] audit: type=1103 audit(1707506959.447:1400): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.845924] audit: type=1006 audit(1707506959.447:1401): pid=5251 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 165.849861] audit: type=1300 audit(1707506959.447:1401): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc41c76680 a2=3 a3=0 items=0 ppid=1 pid=5251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.856191] audit: type=1327 audit(1707506959.447:1401): proctitle=737368643A20636F7265205B707269765D [ 165.870940] audit: type=1105 audit(1707506959.478:1402): pid=5251 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.879041] audit: type=1103 audit(1707506959.486:1403): pid=5253 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 166.572445] audit: type=1106 audit(1707506960.179:1404): pid=5251 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 166.581642] audit: type=1104 audit(1707506960.181:1405): pid=5251 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.595761] kauditd_printk_skb: 1 callbacks suppressed [ 171.595763] audit: type=1130 audit(1707506965.202:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.113:22-139.178.68.195:50556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.774877] audit: type=1101 audit(1707506965.381:1408): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.781258] audit: type=1103 audit(1707506965.387:1409): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.787069] audit: type=1006 audit(1707506965.387:1410): pid=5273 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 171.790847] audit: type=1300 audit(1707506965.387:1410): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc751e17b0 a2=3 a3=0 items=0 ppid=1 pid=5273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.797282] audit: type=1327 audit(1707506965.387:1410): proctitle=737368643A20636F7265205B707269765D [ 171.805574] audit: type=1105 audit(1707506965.412:1411): pid=5273 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.812713] audit: type=1103 audit(1707506965.414:1412): pid=5275 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 172.003319] audit: type=1106 audit(1707506965.609:1413): pid=5273 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 172.011021] audit: type=1104 audit(1707506965.617:1414): pid=5273 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.029847] kauditd_printk_skb: 1 callbacks suppressed [ 177.029850] audit: type=1130 audit(1707506970.636:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.113:22-139.178.68.195:34594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.198997] audit: type=1101 audit(1707506970.805:1417): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.206911] audit: type=1103 audit(1707506970.813:1418): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.214789] audit: type=1006 audit(1707506970.813:1419): pid=5289 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 177.220431] audit: type=1300 audit(1707506970.813:1419): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0de6ff70 a2=3 a3=0 items=0 ppid=1 pid=5289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.229447] audit: type=1327 audit(1707506970.813:1419): proctitle=737368643A20636F7265205B707269765D [ 177.241272] audit: type=1105 audit(1707506970.847:1420): pid=5289 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.251193] audit: type=1103 audit(1707506970.852:1421): pid=5292 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.465344] audit: type=1106 audit(1707506971.071:1422): pid=5289 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 177.473050] audit: type=1104 audit(1707506971.071:1423): pid=5289 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.494364] kauditd_printk_skb: 1 callbacks suppressed [ 182.494368] audit: type=1130 audit(1707506976.100:1425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.113:22-139.178.68.195:42282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.673272] audit: type=1101 audit(1707506976.279:1426): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.680449] audit: type=1103 audit(1707506976.287:1427): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.687130] audit: type=1006 audit(1707506976.287:1428): pid=5304 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 182.690675] audit: type=1300 audit(1707506976.287:1428): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed366f7a0 a2=3 a3=0 items=0 ppid=1 pid=5304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.699737] audit: type=1327 audit(1707506976.287:1428): proctitle=737368643A20636F7265205B707269765D [ 182.707902] audit: type=1105 audit(1707506976.314:1429): pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.717902] audit: type=1103 audit(1707506976.323:1430): pid=5306 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.944177] audit: type=1106 audit(1707506976.548:1431): pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.956627] audit: type=1104 audit(1707506976.548:1432): pid=5304 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.973185] kauditd_printk_skb: 1 callbacks suppressed [ 187.973188] audit: type=1130 audit(1707506981.579:1434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.113:22-139.178.68.195:42284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.183707] audit: type=1101 audit(1707506981.790:1435): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 188.191429] audit: type=1103 audit(1707506981.797:1436): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 188.197412] audit: type=1006 audit(1707506981.798:1437): pid=5341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 188.200750] audit: type=1300 audit(1707506981.798:1437): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd78085d60 a2=3 a3=0 items=0 ppid=1 pid=5341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.211228] audit: type=1327 audit(1707506981.798:1437): proctitle=737368643A20636F7265205B707269765D [ 188.223842] audit: type=1105 audit(1707506981.830:1438): pid=5341 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 188.235748] audit: type=1103 audit(1707506981.833:1439): pid=5343 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 188.464770] audit: type=1106 audit(1707506982.071:1440): pid=5341 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 188.475965] audit: type=1104 audit(1707506982.072:1441): pid=5341 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.347216] kauditd_printk_skb: 23 callbacks suppressed [ 196.347219] audit: type=1130 audit(1707506989.953:1461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.113:22-139.178.68.195:52310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.524596] audit: type=1101 audit(1707506990.131:1462): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.532074] audit: type=1103 audit(1707506990.138:1463): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.538807] audit: type=1006 audit(1707506990.138:1464): pid=5429 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 196.542895] audit: type=1300 audit(1707506990.138:1464): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe19112480 a2=3 a3=0 items=0 ppid=1 pid=5429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.549940] audit: type=1327 audit(1707506990.138:1464): proctitle=737368643A20636F7265205B707269765D [ 196.559907] audit: type=1105 audit(1707506990.166:1465): pid=5429 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.567937] audit: type=1103 audit(1707506990.172:1466): pid=5431 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.822416] audit: type=1106 audit(1707506990.428:1467): pid=5429 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 196.833267] audit: type=1104 audit(1707506990.428:1468): pid=5429 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 201.850058] kauditd_printk_skb: 1 callbacks suppressed [ 201.850060] audit: type=1130 audit(1707506995.456:1470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.113:22-139.178.68.195:52326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.016985] audit: type=1101 audit(1707506995.623:1471): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.026351] audit: type=1103 audit(1707506995.632:1472): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.033220] audit: type=1006 audit(1707506995.632:1473): pid=5445 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 202.036799] audit: type=1300 audit(1707506995.632:1473): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6607e0c0 a2=3 a3=0 items=0 ppid=1 pid=5445 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.043555] audit: type=1327 audit(1707506995.632:1473): proctitle=737368643A20636F7265205B707269765D [ 202.054194] audit: type=1105 audit(1707506995.660:1474): pid=5445 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.062204] audit: type=1103 audit(1707506995.664:1475): pid=5447 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.281667] audit: type=1106 audit(1707506995.888:1476): pid=5445 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.289298] audit: type=1104 audit(1707506995.888:1477): pid=5445 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.309864] kauditd_printk_skb: 1 callbacks suppressed [ 207.309867] audit: type=1130 audit(1707507000.916:1479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.113:22-139.178.68.195:51680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.482554] audit: type=1101 audit(1707507001.088:1480): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.489297] audit: type=1103 audit(1707507001.095:1481): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.495804] audit: type=1006 audit(1707507001.095:1482): pid=5457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 207.499480] audit: type=1300 audit(1707507001.095:1482): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd06b83470 a2=3 a3=0 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.506429] audit: type=1327 audit(1707507001.095:1482): proctitle=737368643A20636F7265205B707269765D [ 207.511332] audit: type=1105 audit(1707507001.117:1483): pid=5457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.518321] audit: type=1103 audit(1707507001.117:1484): pid=5459 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.795673] audit: type=1106 audit(1707507001.402:1485): pid=5457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 207.802965] audit: type=1104 audit(1707507001.402:1486): pid=5457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 212.697691] kauditd_printk_skb: 7 callbacks suppressed [ 212.697695] audit: type=1400 audit(1707507006.304:1490): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 212.705508] audit: type=1300 audit(1707507006.304:1490): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c002b9d040 a2=fc6 a3=0 items=0 ppid=2597 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 key=(null) [ 212.713878] audit: type=1327 audit(1707507006.304:1490): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 212.721518] audit: type=1400 audit(1707507006.304:1491): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 212.727655] audit: type=1300 audit(1707507006.304:1491): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00c129e30 a2=fc6 a3=0 items=0 ppid=2597 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 key=(null) [ 212.738154] audit: type=1327 audit(1707507006.304:1491): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 212.744896] audit: type=1400 audit(1707507006.305:1492): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 212.752087] audit: type=1300 audit(1707507006.305:1492): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00c129e90 a2=fc6 a3=0 items=0 ppid=2597 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 key=(null) [ 212.761775] audit: type=1327 audit(1707507006.305:1492): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 212.767904] audit: type=1400 audit(1707507006.305:1493): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 218.351041] kauditd_printk_skb: 43 callbacks suppressed [ 218.351045] audit: type=1130 audit(1707507011.957:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.113:22-139.178.68.195:41804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 218.444123] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 218.445749] IPv6: ADDRCONF(NETDEV_CHANGE): cali7a8522302bc: link becomes ready [ 218.568822] audit: type=1325 audit(1707507012.174:1514): table=filter:131 family=2 entries=59 op=nft_register_chain pid=5599 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 218.575599] audit: type=1300 audit(1707507012.174:1514): arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffd05af2400 a2=0 a3=7ffd05af23ec items=0 ppid=4083 pid=5599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 218.593882] audit: type=1327 audit(1707507012.174:1514): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 218.646849] audit: type=1400 audit(1707507012.253:1515): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.651242] audit: type=1400 audit(1707507012.253:1516): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.656960] audit: type=1400 audit(1707507012.253:1517): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.661397] audit: type=1400 audit(1707507012.253:1518): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.667495] audit: type=1400 audit(1707507012.253:1519): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 218.672726] audit: type=1400 audit(1707507012.253:1520): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-21-113 (Linux x86_64 5.15.148-flatcar) 19:30:14 SSH host key: SHA256:Z0yHOsJFsrl4XPCHllrTBbsy8zu5q7Gc8LK/hxFRLUY (ECDSA) SSH host key: SHA256:GtCGpCIRp66e39O1x/pY4sYiPVoVmNpf4w9uAF7vd0M (RSA) SSH host key: SHA256:OLI8nRYPN9lzCmU2ubdQjCqBM+DwLMUi6h1THNmkA+E (ED25519) eth0: 172.31.21.113 fe80::4f5:b3ff:fe2d:db9f ip-172-31-21-113 login: [ 224.375260] kauditd_printk_skb: 80 callbacks suppressed [ 224.375263] audit: type=1400 audit(1707507017.981:1556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.389643] audit: type=1400 audit(1707507017.981:1557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.403072] audit: type=1400 audit(1707507017.981:1558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.411092] audit: type=1400 audit(1707507017.981:1559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.417323] audit: type=1400 audit(1707507017.981:1560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.424165] audit: type=1400 audit(1707507017.981:1561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.430852] audit: type=1400 audit(1707507017.981:1562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.439102] audit: type=1400 audit(1707507017.981:1563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.444327] audit: type=1400 audit(1707507017.981:1564): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 224.452680] audit: type=1400 audit(1707507017.982:1565): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 232.269277] kauditd_printk_skb: 99 callbacks suppressed [ 232.269281] audit: type=1130 audit(1707507025.876:1604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.113:22-139.178.68.195:39888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 232.462058] audit: type=1101 audit(1707507026.069:1605): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 232.471238] audit: type=1103 audit(1707507026.076:1606): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 232.481332] audit: type=1006 audit(1707507026.076:1607): pid=5878 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 232.487348] audit: type=1300 audit(1707507026.076:1607): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd41779700 a2=3 a3=0 items=0 ppid=1 pid=5878 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 232.496331] audit: type=1327 audit(1707507026.076:1607): proctitle=737368643A20636F7265205B707269765D [ 232.499223] audit: type=1105 audit(1707507026.104:1608): pid=5878 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 232.507670] audit: type=1103 audit(1707507026.105:1609): pid=5880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 232.797915] audit: type=1106 audit(1707507026.404:1610): pid=5878 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 232.806218] audit: type=1104 audit(1707507026.404:1611): pid=5878 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 237.833740] kauditd_printk_skb: 7 callbacks suppressed [ 237.833743] audit: type=1130 audit(1707507031.441:1615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.113:22-139.178.68.195:55894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.021535] audit: type=1101 audit(1707507031.628:1616): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 238.029476] audit: type=1103 audit(1707507031.636:1617): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 238.035628] audit: type=1006 audit(1707507031.636:1618): pid=5923 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 238.039228] audit: type=1300 audit(1707507031.636:1618): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6fd3f740 a2=3 a3=0 items=0 ppid=1 pid=5923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.045021] audit: type=1327 audit(1707507031.636:1618): proctitle=737368643A20636F7265205B707269765D [ 238.058495] audit: type=1105 audit(1707507031.665:1619): pid=5923 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 238.066494] audit: type=1103 audit(1707507031.670:1620): pid=5929 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 238.336988] audit: type=1106 audit(1707507031.944:1621): pid=5923 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 238.355024] audit: type=1104 audit(1707507031.944:1622): pid=5923 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.363087] kauditd_printk_skb: 1 callbacks suppressed [ 243.363090] audit: type=1130 audit(1707507036.969:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.113:22-139.178.68.195:59162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 243.537594] audit: type=1101 audit(1707507037.144:1625): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.544911] audit: type=1103 audit(1707507037.146:1626): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.552290] audit: type=1006 audit(1707507037.146:1627): pid=5942 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 243.565932] audit: type=1300 audit(1707507037.146:1627): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd653aa3d0 a2=3 a3=0 items=0 ppid=1 pid=5942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 243.573216] audit: type=1327 audit(1707507037.146:1627): proctitle=737368643A20636F7265205B707269765D [ 243.583797] audit: type=1105 audit(1707507037.188:1628): pid=5942 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.591259] audit: type=1103 audit(1707507037.191:1629): pid=5944 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.827874] audit: type=1106 audit(1707507037.434:1630): pid=5942 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 243.836086] audit: type=1104 audit(1707507037.435:1631): pid=5942 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 248.860600] kauditd_printk_skb: 13 callbacks suppressed [ 248.860603] audit: type=1130 audit(1707507042.467:1637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.113:22-139.178.68.195:59178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.031972] audit: type=1101 audit(1707507042.639:1638): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 249.039999] audit: type=1103 audit(1707507042.647:1639): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 249.048163] audit: type=1006 audit(1707507042.647:1640): pid=6050 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 249.053865] audit: type=1300 audit(1707507042.647:1640): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd38723940 a2=3 a3=0 items=0 ppid=1 pid=6050 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 249.061174] audit: type=1327 audit(1707507042.647:1640): proctitle=737368643A20636F7265205B707269765D [ 249.065126] audit: type=1105 audit(1707507042.671:1641): pid=6050 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 249.074019] audit: type=1103 audit(1707507042.672:1642): pid=6052 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 249.340340] audit: type=1106 audit(1707507042.947:1643): pid=6050 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 249.351040] audit: type=1104 audit(1707507042.947:1644): pid=6050 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 254.373072] kauditd_printk_skb: 1 callbacks suppressed [ 254.373076] audit: type=1130 audit(1707507047.980:1646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.113:22-139.178.68.195:50226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 254.598413] audit: type=1101 audit(1707507048.205:1647): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 254.605468] audit: type=1103 audit(1707507048.211:1648): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 254.612111] audit: type=1006 audit(1707507048.211:1649): pid=6080 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 254.617151] audit: type=1300 audit(1707507048.211:1649): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd819a4310 a2=3 a3=0 items=0 ppid=1 pid=6080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 254.624964] audit: type=1327 audit(1707507048.211:1649): proctitle=737368643A20636F7265205B707269765D [ 254.648786] audit: type=1105 audit(1707507048.254:1650): pid=6080 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 254.673195] audit: type=1103 audit(1707507048.278:1651): pid=6086 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 255.077848] audit: type=1106 audit(1707507048.685:1652): pid=6080 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 255.086820] audit: type=1104 audit(1707507048.685:1653): pid=6080 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.112326] kauditd_printk_skb: 1 callbacks suppressed [ 260.112329] audit: type=1130 audit(1707507053.719:1655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.21.113:22-139.178.68.195:50232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 260.316565] audit: type=1101 audit(1707507053.923:1656): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.327418] audit: type=1103 audit(1707507053.934:1657): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.334078] audit: type=1006 audit(1707507053.934:1658): pid=6120 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 [ 260.338109] audit: type=1300 audit(1707507053.934:1658): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea9ce08f0 a2=3 a3=0 items=0 ppid=1 pid=6120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 260.345861] audit: type=1327 audit(1707507053.934:1658): proctitle=737368643A20636F7265205B707269765D [ 260.348794] audit: type=1105 audit(1707507053.955:1659): pid=6120 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.356146] audit: type=1103 audit(1707507053.956:1660): pid=6122 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.565614] audit: type=1106 audit(1707507054.172:1661): pid=6120 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 260.573023] audit: type=1104 audit(1707507054.172:1662): pid=6120 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 265.593405] kauditd_printk_skb: 1 callbacks suppressed [ 265.593408] audit: type=1130 audit(1707507059.200:1664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.21.113:22-139.178.68.195:52062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 265.764395] audit: type=1101 audit(1707507059.371:1665): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 265.773656] audit: type=1103 audit(1707507059.380:1666): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 265.782182] audit: type=1006 audit(1707507059.381:1667): pid=6135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 [ 265.789848] audit: type=1300 audit(1707507059.381:1667): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffeaebc480 a2=3 a3=0 items=0 ppid=1 pid=6135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 265.797767] audit: type=1327 audit(1707507059.381:1667): proctitle=737368643A20636F7265205B707269765D [ 265.800414] audit: type=1105 audit(1707507059.407:1668): pid=6135 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 265.808411] audit: type=1103 audit(1707507059.411:1669): pid=6137 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 266.085180] audit: type=1106 audit(1707507059.692:1670): pid=6135 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 266.091615] audit: type=1104 audit(1707507059.692:1671): pid=6135 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 270.738153] kauditd_printk_skb: 1 callbacks suppressed [ 270.738156] audit: type=1400 audit(1707507064.345:1673): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 270.746233] audit: type=1300 audit(1707507064.345:1673): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012255c0 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) [ 270.753512] audit: type=1327 audit(1707507064.345:1673): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 270.759552] audit: type=1400 audit(1707507064.348:1674): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 270.765051] audit: type=1300 audit(1707507064.348:1674): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010e4800 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) [ 270.772403] audit: type=1327 audit(1707507064.348:1674): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 272.702415] audit: type=1400 audit(1707507066.309:1675): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 272.708401] audit: type=1400 audit(1707507066.309:1676): avc: denied { watch } for pid=2760 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 272.715451] audit: type=1300 audit(1707507066.309:1675): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c009eb2930 a2=fc6 a3=0 items=0 ppid=2597 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c735 key=(null) [ 272.724175] audit: type=1327 audit(1707507066.309:1675): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313133002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 275.761787] kauditd_printk_skb: 14 callbacks suppressed [ 275.761790] audit: type=1400 audit(1707507069.368:1681): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 275.773697] audit: type=1300 audit(1707507069.368:1681): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011180c0 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) [ 275.790824] audit: type=1327 audit(1707507069.368:1681): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 275.797720] audit: type=1400 audit(1707507069.379:1682): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 275.815995] audit: type=1300 audit(1707507069.379:1682): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010e4c80 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) [ 275.828753] audit: type=1327 audit(1707507069.379:1682): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 275.836851] audit: type=1400 audit(1707507069.385:1683): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 275.843614] audit: type=1300 audit(1707507069.385:1683): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011180e0 a2=fc6 a3=0 items=0 ppid=2624 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 key=(null) [ 275.852970] audit: type=1327 audit(1707507069.385:1683): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 275.860012] audit: type=1400 audit(1707507069.446:1684): avc: denied { watch } for pid=2787 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 280.937672] kauditd_printk_skb: 6 callbacks suppressed [ 280.937675] audit: type=1334 audit(1707507074.544:1689): prog-id=129 op=UNLOAD [ 280.942240] audit: type=1334 audit(1707507074.549:1690): prog-id=132 op=UNLOAD [ 281.206803] audit: type=1400 audit(1707507074.813:1691): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.211969] audit: type=1400 audit(1707507074.813:1692): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.218590] audit: type=1400 audit(1707507074.813:1693): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.219274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 281.223194] audit: type=1400 audit(1707507074.813:1694): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.223200] audit: type=1400 audit(1707507074.813:1695): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.223203] audit: type=1400 audit(1707507074.813:1696): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 281.223206] audit: type=1400 audit(1707507074.813:1697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 286.289762] kauditd_printk_skb: 115 callbacks suppressed [ 286.289765] audit: type=1400 audit(1707507079.896:1729): avc: denied { watch } for pid=5715 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_30_11.1680994519/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c478,c675 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c478,c675 tclass=file permissive=0 [ 286.298249] audit: type=1300 audit(1707507079.896:1729): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001bba300 a2=fc6 a3=0 items=0 ppid=5579 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c478,c675 key=(null) [ 286.306887] audit: type=1327 audit(1707507079.896:1729): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 286.503015] audit: type=1334 audit(1707507080.110:1730): prog-id=92 op=UNLOAD [ 286.505368] audit: type=1334 audit(1707507080.110:1731): prog-id=110 op=UNLOAD [ 287.220993] audit: type=1400 audit(1707507080.827:1732): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 287.225674] audit: type=1400 audit(1707507080.827:1733): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 287.233398] audit: type=1400 audit(1707507080.827:1734): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 287.237972] audit: type=1400 audit(1707507080.827:1735): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 287.242486] audit: type=1400 audit(1707507080.827:1736): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0