e_limit=0 audit_backlog_limit=64 [ 86.864378] audit: type=1400 audit(1707507194.076:727): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 86.864587] audit: backlog limit exceeded [ 86.872348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.875571] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 94.465606] kauditd_printk_skb: 393 callbacks suppressed [ 94.465613] audit: type=1106 audit(1707507201.697:905): pid=1198 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 94.478616] audit: type=1104 audit(1707507201.698:906): pid=1198 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 94.803998] audit: type=1106 audit(1707507202.035:907): pid=1194 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 94.818497] audit: type=1104 audit(1707507202.035:908): pid=1194 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 94.839943] audit: type=1131 audit(1707507202.070:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.68:22-172.24.4.1:40728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 98.284098] audit: type=1400 audit(1707507205.516:910): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 98.295890] audit: type=1400 audit(1707507205.520:911): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 98.301228] audit: type=1300 audit(1707507205.520:911): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001346a60 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 98.308319] audit: type=1327 audit(1707507205.520:911): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 98.319411] audit: type=1400 audit(1707507205.525:912): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 99.741015] kauditd_printk_skb: 7 callbacks suppressed [ 99.741019] audit: type=1400 audit(1707507206.972:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.747898] audit: type=1400 audit(1707507206.972:915): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.755713] audit: type=1400 audit(1707507206.972:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.759575] audit: type=1400 audit(1707507206.972:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.766823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.767913] audit: type=1400 audit(1707507206.972:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.768014] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 99.771419] audit: type=1400 audit(1707507206.972:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.771423] audit: type=1400 audit(1707507206.972:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.772792] audit: backlog limit exceeded [ 106.727250] kauditd_printk_skb: 338 callbacks suppressed [ 106.727254] audit: type=1325 audit(1707507213.959:1017): table=filter:103 family=2 entries=13 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.731940] audit: type=1300 audit(1707507213.959:1017): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffd514212d0 a2=0 a3=7ffd514212bc items=0 ppid=2176 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.737422] audit: type=1327 audit(1707507213.959:1017): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 106.742843] audit: type=1325 audit(1707507213.974:1018): table=nat:104 family=2 entries=20 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.745682] audit: type=1300 audit(1707507213.974:1018): arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd514212d0 a2=0 a3=7ffd514212bc items=0 ppid=2176 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.754086] audit: type=1327 audit(1707507213.974:1018): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 106.938356] audit: type=1325 audit(1707507214.169:1019): table=filter:105 family=2 entries=14 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.941574] audit: type=1300 audit(1707507214.169:1019): arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffff97d0620 a2=0 a3=7ffff97d060c items=0 ppid=2176 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.949656] audit: type=1327 audit(1707507214.169:1019): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 106.952646] audit: type=1325 audit(1707507214.170:1020): table=nat:106 family=2 entries=20 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.166538] kauditd_printk_skb: 179 callbacks suppressed [ 115.166541] audit: type=1400 audit(1707507222.398:1077): avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.171261] audit: type=1300 audit(1707507222.398:1077): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2474 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.176681] audit: type=1327 audit(1707507222.398:1077): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637386331343761633438386535653862633131326264313036336466 [ 115.181581] audit: type=1400 audit(1707507222.405:1078): avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.185056] audit: type=1400 audit(1707507222.405:1078): avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.188522] audit: type=1400 audit(1707507222.405:1078): avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.192114] audit: type=1400 audit(1707507222.405:1078): avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.195650] audit: type=1400 audit(1707507222.405:1078): avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.199193] audit: type=1400 audit(1707507222.405:1078): avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.202660] audit: type=1400 audit(1707507222.405:1078): avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.646496] kauditd_printk_skb: 34 callbacks suppressed [ 125.646499] audit: type=1400 audit(1707507232.878:1084): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.651196] audit: type=1300 audit(1707507232.878:1084): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2474 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.664002] audit: type=1327 audit(1707507232.878:1084): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861643833616531613234343366333537316235633765303734643338 [ 125.669795] audit: type=1400 audit(1707507232.878:1085): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.673476] audit: type=1400 audit(1707507232.878:1085): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.677733] audit: type=1400 audit(1707507232.878:1085): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.681507] audit: type=1400 audit(1707507232.878:1085): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.685578] audit: type=1400 audit(1707507232.878:1085): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.689211] audit: type=1400 audit(1707507232.878:1085): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.692748] audit: type=1400 audit(1707507232.878:1085): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 137.136343] kauditd_printk_skb: 40 callbacks suppressed [ 137.136346] audit: type=1400 audit(1707507244.367:1093): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 137.143818] audit: type=1400 audit(1707507244.368:1094): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525072 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 137.160208] audit: type=1300 audit(1707507244.368:1094): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f27740 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 137.176566] audit: type=1327 audit(1707507244.368:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 137.188640] audit: type=1300 audit(1707507244.367:1093): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cb4060 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 137.204855] audit: type=1327 audit(1707507244.367:1093): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 140.230659] audit: type=1400 audit(1707507247.462:1095): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525068 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 140.235556] audit: type=1400 audit(1707507247.462:1096): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 140.240717] audit: type=1300 audit(1707507247.462:1096): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c002a5d5c0 a2=fc6 a3=0 items=0 ppid=1693 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 key=(null) [ 140.252579] audit: type=1327 audit(1707507247.462:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3638002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 [ 140.600265] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 140.601714] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 142.137798] kauditd_printk_skb: 87 callbacks suppressed [ 142.137802] audit: type=1400 audit(1707507249.369:1113): avc: denied { write } for pid=3188 comm="tee" name="fd" dev="proc" ino=27240 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 142.143344] audit: type=1300 audit(1707507249.369:1113): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea327e962 a2=241 a3=1b6 items=1 ppid=3123 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.160134] audit: type=1307 audit(1707507249.369:1113): cwd="/etc/service/enabled/bird/log" [ 142.163618] audit: type=1302 audit(1707507249.369:1113): item=0 name="/dev/fd/63" inode=26562 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 142.170918] audit: type=1327 audit(1707507249.369:1113): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 143.507072] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 143.508596] IPv6: ADDRCONF(NETDEV_CHANGE): cali4d56dbd12d5: link becomes ready [ 143.693543] audit: type=1400 audit(1707507250.924:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 143.697306] audit: type=1400 audit(1707507250.924:1115): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 143.701454] audit: type=1400 audit(1707507250.924:1116): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 143.705007] audit: type=1400 audit(1707507250.924:1117): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 143.708599] audit: type=1400 audit(1707507250.924:1118): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 144.205265] IPv6: ADDRCONF(NETDEV_CHANGE): cali58c5c078456: link becomes ready This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:12 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: [ 145.494402] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 145.495537] IPv6: ADDRCONF(NETDEV_CHANGE): cali43ee7e53956: link becomes ready This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:13 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:14 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: [ 147.540428] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 147.541579] IPv6: ADDRCONF(NETDEV_CHANGE): calia1839f304a7: link becomes ready [ 147.742667] kauditd_printk_skb: 384 callbacks suppressed [ 147.742670] audit: type=1325 audit(1707507254.974:1229): table=filter:122 family=2 entries=38 op=nft_register_chain pid=3832 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 147.746875] audit: type=1300 audit(1707507254.974:1229): arch=c000003e syscall=46 success=yes exit=19492 a0=3 a1=7ffc399d3ba0 a2=0 a3=7ffc399d3b8c items=0 ppid=3120 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.754696] audit: type=1327 audit(1707507254.974:1229): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 147.776742] audit: type=1400 audit(1707507255.007:1230): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.781380] audit: type=1400 audit(1707507255.007:1231): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.786132] audit: type=1400 audit(1707507255.007:1232): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.790938] audit: type=1400 audit(1707507255.007:1233): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.794960] audit: type=1400 audit(1707507255.007:1234): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.799789] audit: type=1400 audit(1707507255.007:1235): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 147.811927] audit: type=1400 audit(1707507255.007:1236): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:15 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:17 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: [ 155.138975] kauditd_printk_skb: 162 callbacks suppressed [ 155.138978] audit: type=1400 audit(1707507262.369:1276): avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.143196] audit: type=1300 audit(1707507262.369:1276): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3801 pid=4155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.148491] audit: type=1327 audit(1707507262.369:1276): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337613264323066396138326330636339643466623330336264366338 [ 155.153734] audit: type=1400 audit(1707507262.369:1277): avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.157467] audit: type=1400 audit(1707507262.369:1277): avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.161339] audit: type=1400 audit(1707507262.369:1277): avc: denied { bpf } for pid=4155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.165795] audit: type=1400 audit(1707507262.369:1277): avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.170024] audit: type=1400 audit(1707507262.369:1277): avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.174156] audit: type=1400 audit(1707507262.369:1277): avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.177863] audit: type=1400 audit(1707507262.369:1277): avc: denied { perfmon } for pid=4155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 161.819437] kauditd_printk_skb: 45 callbacks suppressed [ 161.819440] audit: type=1325 audit(1707507269.051:1286): table=filter:127 family=2 entries=7 op=nft_register_rule pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.823885] audit: type=1300 audit(1707507269.051:1286): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff0a9f4d00 a2=0 a3=7fff0a9f4cec items=0 ppid=2176 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.830210] audit: type=1327 audit(1707507269.051:1286): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 161.833365] audit: type=1325 audit(1707507269.064:1287): table=nat:128 family=2 entries=78 op=nft_register_rule pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.836873] audit: type=1300 audit(1707507269.064:1287): arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff0a9f4d00 a2=0 a3=7fff0a9f4cec items=0 ppid=2176 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.844746] audit: type=1327 audit(1707507269.064:1287): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 161.893925] audit: type=1325 audit(1707507269.125:1288): table=filter:129 family=2 entries=8 op=nft_register_rule pid=4287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.897111] audit: type=1300 audit(1707507269.125:1288): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffe27d97760 a2=0 a3=7ffe27d9774c items=0 ppid=2176 pid=4287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.903097] audit: type=1327 audit(1707507269.125:1288): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 161.908301] audit: type=1325 audit(1707507269.140:1289): table=nat:130 family=2 entries=78 op=nft_register_rule pid=4287 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.433541] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 162.435706] IPv6: ADDRCONF(NETDEV_CHANGE): cali92d41ead365: link becomes ready [ 162.498388] IPv6: ADDRCONF(NETDEV_CHANGE): caliec11ee79ed0: link becomes ready This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:32 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: This is ci-3510-3-2-2-bf9c3542bb.novalocal (Linux x86_64 5.15.148-flatcar) 19:34:33 SSH host key: SHA256:MZX3bMe079PsvI9NdT2Uq42bfQkMMq9MnzYf0467kW8 (ECDSA) SSH host key: SHA256:gIIHQBvsX087QHM1UGlOKCOqvZDrxF2tcJ1D+abFGZA (RSA) SSH host key: SHA256:uF0XVxwjEbNNjhM3ORpSX+2xP67Fu6GsHZ0JiAVeZN4 (ED25519) eth0: 172.24.4.68 fe80::f816:3eff:fec0:ab85 ci-3510-3-2-2-bf9c3542bb login: [ 167.438372] kauditd_printk_skb: 122 callbacks suppressed [ 167.438375] audit: type=1400 audit(1707507274.670:1328): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.443402] audit: type=1400 audit(1707507274.670:1329): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.446519] audit: type=1400 audit(1707507274.670:1330): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.449911] audit: type=1400 audit(1707507274.670:1331): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.453135] audit: type=1400 audit(1707507274.670:1332): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.456580] audit: type=1400 audit(1707507274.670:1333): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.461267] audit: type=1400 audit(1707507274.670:1334): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.467729] audit: type=1400 audit(1707507274.670:1335): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.471600] audit: type=1400 audit(1707507274.670:1336): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 167.475187] audit: type=1400 audit(1707507274.670:1337): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 179.452833] kauditd_printk_skb: 122 callbacks suppressed [ 179.452838] audit: type=1130 audit(1707507286.685:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.68:22-172.24.4.1:47700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.953177] audit: type=1101 audit(1707507288.185:1371): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 180.961660] audit: type=1103 audit(1707507288.193:1372): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 180.967155] audit: type=1006 audit(1707507288.193:1373): pid=4589 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 180.971323] audit: type=1300 audit(1707507288.193:1373): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd50c373a0 a2=3 a3=0 items=0 ppid=1 pid=4589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.976868] audit: type=1327 audit(1707507288.193:1373): proctitle=737368643A20636F7265205B707269765D [ 180.991595] audit: type=1105 audit(1707507288.223:1374): pid=4589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 180.996520] audit: type=1103 audit(1707507288.225:1375): pid=4591 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 182.348793] audit: type=1106 audit(1707507289.580:1376): pid=4589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 182.372450] audit: type=1104 audit(1707507289.581:1377): pid=4589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 187.357405] kauditd_printk_skb: 1 callbacks suppressed [ 187.357412] audit: type=1130 audit(1707507294.588:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.68:22-172.24.4.1:33734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.688015] audit: type=1101 audit(1707507295.920:1380): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 188.700735] audit: type=1103 audit(1707507295.932:1381): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 188.710794] audit: type=1006 audit(1707507295.933:1382): pid=4611 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 188.717377] audit: type=1300 audit(1707507295.933:1382): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1079e1a0 a2=3 a3=0 items=0 ppid=1 pid=4611 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.728246] audit: type=1327 audit(1707507295.933:1382): proctitle=737368643A20636F7265205B707269765D [ 188.758362] audit: type=1105 audit(1707507295.990:1383): pid=4611 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 188.772577] audit: type=1103 audit(1707507296.004:1384): pid=4614 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 189.587882] audit: type=1106 audit(1707507296.818:1385): pid=4611 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 189.600276] audit: type=1104 audit(1707507296.818:1386): pid=4611 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 192.358854] kauditd_printk_skb: 1 callbacks suppressed [ 192.358857] audit: type=1325 audit(1707507299.591:1388): table=filter:137 family=2 entries=7 op=nft_register_rule pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.363974] audit: type=1300 audit(1707507299.591:1388): arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffcff4ee5e0 a2=0 a3=7ffcff4ee5cc items=0 ppid=2176 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.373239] audit: type=1327 audit(1707507299.591:1388): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.380184] audit: type=1325 audit(1707507299.594:1389): table=nat:138 family=2 entries=85 op=nft_register_chain pid=4731 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.383455] audit: type=1300 audit(1707507299.594:1389): arch=c000003e syscall=46 success=yes exit=28484 a0=3 a1=7ffcff4ee5e0 a2=0 a3=7ffcff4ee5cc items=0 ppid=2176 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.395003] audit: type=1327 audit(1707507299.594:1389): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.458436] audit: type=1325 audit(1707507299.690:1390): table=filter:139 family=2 entries=6 op=nft_register_rule pid=4757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.461790] audit: type=1300 audit(1707507299.690:1390): arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffdff0abf60 a2=0 a3=7ffdff0abf4c items=0 ppid=2176 pid=4757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.469027] audit: type=1327 audit(1707507299.690:1390): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 192.473227] audit: type=1325 audit(1707507299.693:1391): table=nat:140 family=2 entries=92 op=nft_register_chain pid=4757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 200.249888] kauditd_printk_skb: 19 callbacks suppressed [ 200.249895] audit: type=1400 audit(1707507307.482:1403): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525068 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 200.265190] audit: type=1300 audit(1707507307.482:1403): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00e7df470 a2=fc6 a3=0 items=0 ppid=1693 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 key=(null) [ 200.279550] audit: type=1327 audit(1707507307.482:1403): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3638002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 [ 200.290933] audit: type=1400 audit(1707507307.482:1404): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525072 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 200.301251] audit: type=1300 audit(1707507307.482:1404): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00ee6b980 a2=fc6 a3=0 items=0 ppid=1693 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 key=(null) [ 200.314087] audit: type=1327 audit(1707507307.482:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3638002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 [ 200.320946] audit: type=1400 audit(1707507307.490:1405): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525074 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 200.325928] audit: type=1300 audit(1707507307.490:1405): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00e7df4a0 a2=fc6 a3=0 items=0 ppid=1693 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 key=(null) [ 200.331931] audit: type=1327 audit(1707507307.490:1405): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3638002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 [ 200.336518] audit: type=1400 audit(1707507307.491:1406): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 205.666734] kauditd_printk_skb: 20 callbacks suppressed [ 205.666739] audit: type=1101 audit(1707507312.899:1419): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 205.680993] audit: type=1103 audit(1707507312.913:1420): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 205.691627] audit: type=1006 audit(1707507312.913:1421): pid=4790 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 205.700451] audit: type=1300 audit(1707507312.913:1421): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdaf922530 a2=3 a3=0 items=0 ppid=1 pid=4790 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.713025] audit: type=1327 audit(1707507312.913:1421): proctitle=737368643A20636F7265205B707269765D [ 205.743510] audit: type=1105 audit(1707507312.975:1422): pid=4790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 205.755629] audit: type=1103 audit(1707507312.979:1423): pid=4812 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 208.214841] audit: type=1130 audit(1707507315.447:1424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.68:22-172.24.4.1:43254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.234150] audit: type=1106 audit(1707507315.465:1425): pid=4790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 208.248811] audit: type=1104 audit(1707507315.466:1426): pid=4790 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 215.434913] kauditd_printk_skb: 11 callbacks suppressed [ 215.434919] audit: type=1130 audit(1707507322.667:1436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.68:22-172.24.4.1:43268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.837879] audit: type=1101 audit(1707507324.070:1437): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 216.847860] audit: type=1103 audit(1707507324.071:1438): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 216.867281] audit: type=1006 audit(1707507324.071:1439): pid=4887 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 216.880212] audit: type=1300 audit(1707507324.071:1439): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4f4489f0 a2=3 a3=0 items=0 ppid=1 pid=4887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.892689] audit: type=1327 audit(1707507324.071:1439): proctitle=737368643A20636F7265205B707269765D [ 216.906630] audit: type=1105 audit(1707507324.138:1440): pid=4887 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 216.917731] audit: type=1103 audit(1707507324.141:1441): pid=4890 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 217.789597] audit: type=1106 audit(1707507325.019:1442): pid=4887 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 217.802899] audit: type=1104 audit(1707507325.020:1443): pid=4887 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 222.796314] kauditd_printk_skb: 13 callbacks suppressed [ 222.796320] audit: type=1130 audit(1707507330.028:1449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.68:22-172.24.4.1:57508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 224.193336] audit: type=1101 audit(1707507331.425:1450): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 224.210958] audit: type=1103 audit(1707507331.443:1451): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 224.221947] audit: type=1006 audit(1707507331.443:1452): pid=4980 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 224.228861] audit: type=1300 audit(1707507331.443:1452): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4119edd0 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.241020] audit: type=1327 audit(1707507331.443:1452): proctitle=737368643A20636F7265205B707269765D [ 224.272334] audit: type=1105 audit(1707507331.504:1453): pid=4980 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 224.288023] audit: type=1103 audit(1707507331.519:1454): pid=4988 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 224.946211] audit: type=1106 audit(1707507332.178:1455): pid=4980 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 224.959092] audit: type=1104 audit(1707507332.178:1456): pid=4980 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 228.529630] kauditd_printk_skb: 1 callbacks suppressed [ 228.529637] audit: type=1400 audit(1707507335.761:1458): avc: denied { watch } for pid=4470 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_34_29.698016253/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c185,c418 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c185,c418 tclass=file permissive=0 [ 228.544002] audit: type=1300 audit(1707507335.761:1458): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001a00480 a2=fc6 a3=0 items=0 ppid=4355 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c185,c418 key=(null) [ 228.556628] audit: type=1327 audit(1707507335.761:1458): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 229.423347] audit: type=1400 audit(1707507336.655:1459): avc: denied { watch } for pid=4508 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_34_29.1492066325/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c501 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c251,c501 tclass=file permissive=0 [ 229.439084] audit: type=1300 audit(1707507336.655:1459): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001246340 a2=fc6 a3=0 items=0 ppid=4396 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c501 key=(null) [ 229.453783] audit: type=1327 audit(1707507336.655:1459): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 229.954314] audit: type=1130 audit(1707507337.186:1460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.68:22-172.24.4.1:55674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 231.598386] audit: type=1101 audit(1707507338.830:1461): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 231.610612] audit: type=1103 audit(1707507338.842:1462): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 231.625276] audit: type=1006 audit(1707507338.842:1463): pid=4999 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 237.504755] kauditd_printk_skb: 7 callbacks suppressed [ 237.504761] audit: type=1130 audit(1707507344.737:1469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.68:22-172.24.4.1:35046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.975383] audit: type=1101 audit(1707507346.207:1470): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 238.989123] audit: type=1103 audit(1707507346.221:1471): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 239.002125] audit: type=1006 audit(1707507346.221:1472): pid=5022 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 239.009458] audit: type=1300 audit(1707507346.221:1472): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9c536ef0 a2=3 a3=0 items=0 ppid=1 pid=5022 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.021179] audit: type=1327 audit(1707507346.221:1472): proctitle=737368643A20636F7265205B707269765D [ 239.049880] audit: type=1105 audit(1707507346.282:1473): pid=5022 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 239.056786] audit: type=1103 audit(1707507346.289:1474): pid=5025 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 239.857434] audit: type=1106 audit(1707507347.089:1475): pid=5022 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 239.876077] audit: type=1104 audit(1707507347.089:1476): pid=5022 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 244.868062] kauditd_printk_skb: 1 callbacks suppressed [ 244.868069] audit: type=1130 audit(1707507352.100:1478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.68:22-172.24.4.1:35062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 246.167879] audit: type=1101 audit(1707507353.400:1479): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 246.179092] audit: type=1103 audit(1707507353.406:1480): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 246.191626] audit: type=1006 audit(1707507353.406:1481): pid=5037 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 246.198215] audit: type=1300 audit(1707507353.406:1481): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc76c4b7a0 a2=3 a3=0 items=0 ppid=1 pid=5037 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 246.209159] audit: type=1327 audit(1707507353.406:1481): proctitle=737368643A20636F7265205B707269765D [ 246.223469] audit: type=1105 audit(1707507353.455:1482): pid=5037 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 246.245019] audit: type=1103 audit(1707507353.477:1483): pid=5039 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 246.958335] audit: type=1106 audit(1707507354.190:1484): pid=5037 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 246.970522] audit: type=1104 audit(1707507354.190:1485): pid=5037 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 251.966865] kauditd_printk_skb: 1 callbacks suppressed [ 251.966871] audit: type=1130 audit(1707507359.199:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.68:22-172.24.4.1:57492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 253.500501] audit: type=1101 audit(1707507360.732:1488): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 253.511840] audit: type=1103 audit(1707507360.743:1489): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 253.522578] audit: type=1006 audit(1707507360.744:1490): pid=5095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 253.529155] audit: type=1300 audit(1707507360.744:1490): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff468b7e00 a2=3 a3=0 items=0 ppid=1 pid=5095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 253.540930] audit: type=1327 audit(1707507360.744:1490): proctitle=737368643A20636F7265205B707269765D [ 253.570253] audit: type=1105 audit(1707507360.802:1491): pid=5095 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 253.582958] audit: type=1103 audit(1707507360.805:1492): pid=5136 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 254.832593] audit: type=1106 audit(1707507362.064:1493): pid=5095 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 254.845025] audit: type=1104 audit(1707507362.065:1494): pid=5095 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 257.195731] kauditd_printk_skb: 1 callbacks suppressed [ 257.195736] audit: type=1400 audit(1707507364.428:1496): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525072 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 257.209822] audit: type=1400 audit(1707507364.435:1497): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 257.221295] audit: type=1300 audit(1707507364.435:1497): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028c8740 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 257.235232] audit: type=1327 audit(1707507364.435:1497): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 257.247601] audit: type=1300 audit(1707507364.428:1496): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002adc120 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 257.260737] audit: type=1327 audit(1707507364.428:1496): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 259.840000] audit: type=1130 audit(1707507367.072:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.68:22-172.24.4.1:48448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 260.261414] audit: type=1400 audit(1707507367.493:1499): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 260.273566] audit: type=1400 audit(1707507367.493:1500): avc: denied { watch } for pid=1864 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525074 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 260.284300] audit: type=1300 audit(1707507367.493:1500): arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c01c7986f0 a2=fc6 a3=0 items=0 ppid=1693 pid=1864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c21,c971 key=(null) [ 267.055688] kauditd_printk_skb: 25 callbacks suppressed [ 267.055695] audit: type=1130 audit(1707507374.288:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.68:22-172.24.4.1:48452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 268.477779] audit: type=1101 audit(1707507375.710:1514): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 268.489736] audit: type=1103 audit(1707507375.721:1515): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 268.500164] audit: type=1006 audit(1707507375.721:1516): pid=5178 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 268.506973] audit: type=1300 audit(1707507375.721:1516): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb51e9c10 a2=3 a3=0 items=0 ppid=1 pid=5178 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 268.518270] audit: type=1327 audit(1707507375.721:1516): proctitle=737368643A20636F7265205B707269765D [ 268.542296] audit: type=1105 audit(1707507375.774:1517): pid=5178 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 268.554439] audit: type=1103 audit(1707507375.777:1518): pid=5182 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 269.619654] audit: type=1106 audit(1707507376.851:1519): pid=5178 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 269.631836] audit: type=1104 audit(1707507376.852:1520): pid=5178 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 274.628023] kauditd_printk_skb: 1 callbacks suppressed [ 274.628029] audit: type=1130 audit(1707507381.860:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.68:22-172.24.4.1:50332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 276.150071] audit: type=1101 audit(1707507383.382:1523): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 276.162481] audit: type=1103 audit(1707507383.393:1524): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 276.173805] audit: type=1006 audit(1707507383.393:1525): pid=5192 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 276.181365] audit: type=1300 audit(1707507383.393:1525): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe202a5b40 a2=3 a3=0 items=0 ppid=1 pid=5192 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 276.193257] audit: type=1327 audit(1707507383.393:1525): proctitle=737368643A20636F7265205B707269765D [ 276.216518] audit: type=1105 audit(1707507383.448:1526): pid=5192 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 276.229780] audit: type=1103 audit(1707507383.462:1527): pid=5198 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 277.109361] audit: type=1106 audit(1707507384.341:1528): pid=5192 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 277.125699] audit: type=1104 audit(1707507384.341:1529): pid=5192 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 282.146368] kauditd_printk_skb: 13 callbacks suppressed [ 282.146371] audit: type=1130 audit(1707507389.378:1535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.68:22-172.24.4.1:36884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 283.368920] audit: type=1101 audit(1707507390.600:1536): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 283.379782] audit: type=1103 audit(1707507390.601:1537): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 283.390107] audit: type=1006 audit(1707507390.601:1538): pid=5269 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 283.397105] audit: type=1300 audit(1707507390.601:1538): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcf021400 a2=3 a3=0 items=0 ppid=1 pid=5269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 283.408230] audit: type=1327 audit(1707507390.601:1538): proctitle=737368643A20636F7265205B707269765D [ 283.432385] audit: type=1105 audit(1707507390.664:1539): pid=5269 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 283.445253] audit: type=1103 audit(1707507390.677:1540): pid=5289 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 284.358115] audit: type=1106 audit(1707507391.590:1541): pid=5269 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 284.368737] audit: type=1104 audit(1707507391.590:1542): pid=5269 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 288.531910] kauditd_printk_skb: 1 callbacks suppressed [ 288.531916] audit: type=1400 audit(1707507395.764:1544): avc: denied { watch } for pid=4470 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_34_29.698016253/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c185,c418 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c185,c418 tclass=file permissive=0 [ 288.548609] audit: type=1300 audit(1707507395.764:1544): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0019ee700 a2=fc6 a3=0 items=0 ppid=4355 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c185,c418 key=(null) [ 288.562521] audit: type=1327 audit(1707507395.764:1544): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 289.368363] audit: type=1130 audit(1707507396.600:1545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.68:22-172.24.4.1:48526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 289.426529] audit: type=1400 audit(1707507396.659:1546): avc: denied { watch } for pid=4508 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_19_34_29.1492066325/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c251,c501 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c251,c501 tclass=file permissive=0 [ 289.438841] audit: type=1300 audit(1707507396.659:1546): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00151c6a0 a2=fc6 a3=0 items=0 ppid=4396 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c251,c501 key=(null) [ 289.448822] audit: type=1327 audit(1707507396.659:1546): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C [ 290.726111] audit: type=1101 audit(1707507397.958:1547): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 290.738054] audit: type=1103 audit(1707507397.969:1548): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 290.750793] audit: type=1006 audit(1707507397.970:1549): pid=5299 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 294.728603] kauditd_printk_skb: 15 callbacks suppressed [ 294.728610] audit: type=1130 audit(1707507401.961:1561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.68:22-172.24.4.1:48538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 294.744360] audit: type=1106 audit(1707507401.976:1562): pid=5312 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 294.759962] audit: type=1104 audit(1707507401.976:1563): pid=5312 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 294.769709] audit: type=1131 audit(1707507401.982:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.68:22-172.24.4.1:48536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 296.492703] audit: type=1101 audit(1707507403.724:1565): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 296.503886] audit: type=1103 audit(1707507403.736:1566): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 296.513974] audit: type=1006 audit(1707507403.736:1567): pid=5320 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 296.522826] audit: type=1300 audit(1707507403.736:1567): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe80181430 a2=3 a3=0 items=0 ppid=1 pid=5320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 296.537064] audit: type=1327 audit(1707507403.736:1567): proctitle=737368643A20636F7265205B707269765D [ 296.571041] audit: type=1105 audit(1707507403.803:1568): pid=5320 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 300.409349] kauditd_printk_skb: 17 callbacks suppressed [ 300.409356] audit: type=1101 audit(1707507407.641:1578): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 300.424749] audit: type=1103 audit(1707507407.645:1579): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 300.437211] audit: type=1006 audit(1707507407.645:1580): pid=5386 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 300.446589] audit: type=1300 audit(1707507407.645:1580): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1da60c60 a2=3 a3=0 items=0 ppid=1 pid=5386 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 300.460506] audit: type=1327 audit(1707507407.645:1580): proctitle=737368643A20636F7265205B707269765D [ 300.501864] audit: type=1105 audit(1707507407.733:1581): pid=5386 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 300.513150] audit: type=1103 audit(1707507407.745:1582): pid=5390 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 302.690523] audit: type=1130 audit(1707507409.923:1583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.68:22-172.24.4.1:33924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 302.702293] audit: type=1106 audit(1707507409.934:1584): pid=5386 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 302.714763] audit: type=1104 audit(1707507409.935:1585): pid=5386 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 305.492185] kauditd_printk_skb: 8 callbacks suppressed [ 305.492192] audit: type=1106 audit(1707507412.724:1592): pid=5398 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 305.511460] audit: type=1104 audit(1707507412.725:1593): pid=5398 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 305.528884] audit: type=1131 audit(1707507412.741:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.68:22-172.24.4.1:33924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 308.907675] audit: type=1325 audit(1707507416.140:1595): table=filter:145 family=2 entries=18 op=nft_register_rule pid=5441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 308.910616] audit: type=1300 audit(1707507416.140:1595): arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffcab7f1340 a2=0 a3=7ffcab7f132c items=0 ppid=2176 pid=5441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 308.916545] audit: type=1327 audit(1707507416.140:1595): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 308.932097] audit: type=1325 audit(1707507416.162:1596): table=nat:146 family=2 entries=178 op=nft_register_chain pid=5441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 308.935320] audit: type=1300 audit(1707507416.162:1596): arch=c000003e syscall=46 success=yes exit=72324 a0=3 a1=7ffcab7f1340 a2=0 a3=7ffcab7f132c items=0 ppid=2176 pid=5441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 308.945735] audit: type=1327 audit(1707507416.162:1596): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 310.499226] audit: type=1130 audit(1707507417.731:1597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.68:22-172.24.4.1:57182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 311.873829] audit: type=1101 audit(1707507419.106:1598): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 311.882375] audit: type=1103 audit(1707507419.114:1599): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 311.889279] audit: type=1006 audit(1707507419.114:1600): pid=5485 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 [ 311.896158] audit: type=1300 audit(1707507419.114:1600): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe59de9010 a2=3 a3=0 items=0 ppid=1 pid=5485 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 311.903093] audit: type=1327 audit(1707507419.114:1600): proctitle=737368643A20636F7265205B707269765D [ 311.921863] audit: type=1105 audit(1707507419.153:1601): pid=5485 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 311.934650] audit: type=1103 audit(1707507419.154:1602): pid=5490 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 312.586811] audit: type=1106 audit(1707507419.819:1603): pid=5485 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 312.599019] audit: type=1104 audit(1707507419.819:1604): pid=5485 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 317.204480] kauditd_printk_skb: 1 callbacks suppressed [ 317.204484] audit: type=1400 audit(1707507424.437:1606): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 317.216645] audit: type=1400 audit(1707507424.437:1607): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525072 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 317.226586] audit: type=1300 audit(1707507424.437:1607): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012bc660 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 317.239144] audit: type=1327 audit(1707507424.437:1607): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 317.249863] audit: type=1300 audit(1707507424.437:1606): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002237ee0 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 317.261548] audit: type=1327 audit(1707507424.437:1606): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 317.600449] audit: type=1130 audit(1707507424.833:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.68:22-172.24.4.1:50930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 319.796213] audit: type=1101 audit(1707507427.028:1609): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 319.808556] audit: type=1103 audit(1707507427.040:1610): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 319.819790] audit: type=1006 audit(1707507427.040:1611): pid=5538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 [ 325.711292] kauditd_printk_skb: 25 callbacks suppressed [ 325.711295] audit: type=1130 audit(1707507432.943:1623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-172.24.4.68:22-172.24.4.1:50942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 327.202227] audit: type=1101 audit(1707507434.434:1624): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 327.217405] audit: type=1103 audit(1707507434.448:1625): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 327.228113] audit: type=1006 audit(1707507434.448:1626): pid=5574 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 [ 327.234973] audit: type=1300 audit(1707507434.448:1626): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd3e4a0e0 a2=3 a3=0 items=0 ppid=1 pid=5574 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 327.246806] audit: type=1327 audit(1707507434.448:1626): proctitle=737368643A20636F7265205B707269765D [ 327.273408] audit: type=1105 audit(1707507434.505:1627): pid=5574 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 327.286673] audit: type=1103 audit(1707507434.506:1628): pid=5576 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 328.009135] audit: type=1106 audit(1707507435.241:1629): pid=5574 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 328.015129] audit: type=1104 audit(1707507435.242:1630): pid=5574 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.016147] kauditd_printk_skb: 1 callbacks suppressed [ 333.016153] audit: type=1130 audit(1707507440.248:1632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-172.24.4.68:22-172.24.4.1:36786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 334.293859] audit: type=1101 audit(1707507441.526:1633): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 334.305124] audit: type=1103 audit(1707507441.537:1634): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 334.315739] audit: type=1006 audit(1707507441.537:1635): pid=5600 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 [ 334.323228] audit: type=1300 audit(1707507441.537:1635): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe083f6fc0 a2=3 a3=0 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 334.336416] audit: type=1327 audit(1707507441.537:1635): proctitle=737368643A20636F7265205B707269765D [ 334.365496] audit: type=1105 audit(1707507441.597:1636): pid=5600 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 334.380779] audit: type=1103 audit(1707507441.613:1637): pid=5602 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 334.991624] audit: type=1106 audit(1707507442.224:1638): pid=5600 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 335.012801] audit: type=1104 audit(1707507442.224:1639): pid=5600 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 338.419598] kauditd_printk_skb: 1 callbacks suppressed [ 338.419605] audit: type=1400 audit(1707507445.652:1641): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 338.432975] audit: type=1300 audit(1707507445.652:1641): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024846e0 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 338.446196] audit: type=1327 audit(1707507445.652:1641): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 338.457504] audit: type=1400 audit(1707507445.652:1642): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 338.467444] audit: type=1300 audit(1707507445.652:1642): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00266a7e0 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 338.480529] audit: type=1327 audit(1707507445.652:1642): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 338.491650] audit: type=1400 audit(1707507445.659:1643): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 338.498995] audit: type=1300 audit(1707507445.659:1643): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00266a800 a2=fc6 a3=0 items=0 ppid=1737 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 key=(null) [ 338.504921] audit: type=1327 audit(1707507445.659:1643): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 338.509823] audit: type=1400 audit(1707507445.663:1644): avc: denied { watch } for pid=1813 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524801 scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c917 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0