g='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 81.186449] audit: type=1131 audit(1707769419.515:984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.82:22-147.75.109.163:33016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.216749] audit: type=1400 audit(1707769426.554:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.224056] audit: type=1400 audit(1707769426.554:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.232109] audit: type=1400 audit(1707769426.554:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.239911] audit: type=1400 audit(1707769426.554:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.251010] audit: type=1400 audit(1707769426.554:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.259376] audit: type=1400 audit(1707769426.554:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.271492] audit: type=1400 audit(1707769426.554:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.280097] audit: type=1400 audit(1707769426.554:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.293128] audit: type=1400 audit(1707769426.554:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.301316] audit: type=1400 audit(1707769426.562:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.622811] kauditd_printk_skb: 357 callbacks suppressed [ 94.622816] audit: type=1325 audit(1707769432.958:1096): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.630729] audit: type=1300 audit(1707769432.958:1096): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.642671] audit: type=1327 audit(1707769432.958:1096): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.651410] audit: type=1325 audit(1707769432.968:1097): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.657479] audit: type=1300 audit(1707769432.968:1097): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.669778] audit: type=1327 audit(1707769432.968:1097): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.677936] audit: type=1325 audit(1707769433.010:1098): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.684257] audit: type=1300 audit(1707769433.010:1098): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc7e9a410 a2=0 a3=ffff9a2ca6c0 items=0 ppid=2902 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.696370] audit: type=1327 audit(1707769433.010:1098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.703262] audit: type=1325 audit(1707769433.016:1099): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 100.053071] kauditd_printk_skb: 179 callbacks suppressed [ 100.053075] audit: type=1400 audit(1707769438.389:1156): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.063609] audit: type=1300 audit(1707769438.389:1156): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.078477] audit: type=1327 audit(1707769438.389:1156): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 [ 100.094219] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.108432] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.118498] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.126881] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.138156] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.146727] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.156296] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.971830] kauditd_printk_skb: 34 callbacks suppressed [ 106.971835] audit: type=1400 audit(1707769445.308:1163): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.984560] audit: type=1300 audit(1707769445.308:1163): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.998798] audit: type=1327 audit(1707769445.308:1163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 [ 107.009162] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.021202] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.028510] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.036168] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.043600] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.050950] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.064251] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 112.380693] kauditd_printk_skb: 34 callbacks suppressed [ 112.380698] audit: type=1325 audit(1707769450.717:1170): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.391115] audit: type=1300 audit(1707769450.717:1170): arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.404060] audit: type=1327 audit(1707769450.717:1170): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.410656] audit: type=1325 audit(1707769450.740:1171): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.417182] audit: type=1300 audit(1707769450.740:1171): arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.432637] audit: type=1327 audit(1707769450.740:1171): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 118.198427] audit: type=1400 audit(1707769456.534:1172): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.206817] audit: type=1300 audit(1707769456.534:1172): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.218183] audit: type=1327 audit(1707769456.534:1172): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 [ 118.229381] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.239872] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.249418] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.262210] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.271026] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.280140] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.288203] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.408929] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 118.411917] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 121.470195] IPv6: ADDRCONF(NETDEV_CHANGE): calib2d0e29d6a4: link becomes ready [ 122.254866] IPv6: ADDRCONF(NETDEV_CHANGE): calid26096dfee6: link becomes ready [ 122.943595] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 122.946122] IPv6: ADDRCONF(NETDEV_CHANGE): califcf7a05c26f: link becomes ready This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:21 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 123.962121] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.964553] IPv6: ADDRCONF(NETDEV_CHANGE): cali6beea11f2f0: link becomes ready This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:22 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 124.064417] kauditd_printk_skb: 378 callbacks suppressed [ 124.064422] audit: type=1325 audit(1707769462.400:1277): table=filter:108 family=2 entries=38 op=nft_register_chain pid=4403 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 124.074423] audit: type=1300 audit(1707769462.400:1277): arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=ffffe871eb90 a2=0 a3=ffff923b9fa8 items=0 ppid=3817 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.087797] audit: type=1327 audit(1707769462.400:1277): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 124.191052] audit: type=1400 audit(1707769462.527:1278): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.200519] audit: type=1400 audit(1707769462.527:1279): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.214429] audit: type=1400 audit(1707769462.527:1280): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.226346] audit: type=1400 audit(1707769462.527:1281): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.240351] audit: type=1400 audit(1707769462.527:1282): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.251429] audit: type=1400 audit(1707769462.527:1283): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.261235] audit: type=1400 audit(1707769462.527:1284): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:23 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:24 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:25 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 129.336583] kauditd_printk_skb: 230 callbacks suppressed [ 129.336588] audit: type=1400 audit(1707769467.673:1351): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 129.351121] audit: type=1300 audit(1707769467.673:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018361b0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 129.364006] audit: type=1327 audit(1707769467.673:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 129.374696] audit: type=1400 audit(1707769467.673:1352): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 129.385692] audit: type=1300 audit(1707769467.673:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63e20 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 129.398590] audit: type=1327 audit(1707769467.673:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 129.608515] audit: type=1400 audit(1707769467.945:1353): avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 129.616064] audit: type=1300 audit(1707769467.945:1353): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.628318] audit: type=1327 audit(1707769467.945:1353): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 [ 129.638747] audit: type=1400 audit(1707769467.945:1354): avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.360536] kauditd_printk_skb: 68 callbacks suppressed [ 135.360541] audit: type=1400 audit(1707769473.697:1374): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.372441] audit: type=1400 audit(1707769473.697:1375): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.384648] audit: type=1300 audit(1707769473.697:1375): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d91240 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.397111] audit: type=1327 audit(1707769473.697:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.408087] audit: type=1300 audit(1707769473.697:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b800 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.420885] audit: type=1327 audit(1707769473.697:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.432429] audit: type=1400 audit(1707769473.718:1376): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.442266] audit: type=1300 audit(1707769473.718:1376): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b860 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.456866] audit: type=1327 audit(1707769473.718:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.467514] audit: type=1400 audit(1707769473.718:1377): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 144.207239] kauditd_printk_skb: 13 callbacks suppressed [ 144.207244] audit: type=1130 audit(1707769482.543:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.82:22-147.75.109.163:54408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.377153] audit: type=1101 audit(1707769482.713:1388): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.390514] audit: type=1103 audit(1707769482.725:1389): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.400920] audit: type=1006 audit(1707769482.725:1390): pid=4926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 144.407248] audit: type=1300 audit(1707769482.725:1390): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc15ec1c0 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.423903] audit: type=1327 audit(1707769482.725:1390): proctitle=737368643A20636F7265205B707269765D [ 144.444566] audit: type=1105 audit(1707769482.780:1391): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.457010] audit: type=1103 audit(1707769482.793:1392): pid=4928 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.763001] audit: type=1106 audit(1707769483.097:1393): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.775759] audit: type=1104 audit(1707769483.097:1394): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.210269] kauditd_printk_skb: 23 callbacks suppressed [ 151.210274] audit: type=1130 audit(1707769489.546:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.82:22-147.75.109.163:53556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.395847] audit: type=1101 audit(1707769489.733:1415): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.411171] audit: type=1103 audit(1707769489.745:1416): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.423591] audit: type=1006 audit(1707769489.745:1417): pid=4987 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 151.431435] audit: type=1300 audit(1707769489.745:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff68462c0 a2=3 a3=1 items=0 ppid=1 pid=4987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.443550] audit: type=1327 audit(1707769489.745:1417): proctitle=737368643A20636F7265205B707269765D [ 151.450066] audit: type=1105 audit(1707769489.783:1418): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.461179] audit: type=1103 audit(1707769489.786:1419): pid=4992 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.708609] audit: type=1106 audit(1707769490.046:1420): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.721184] audit: type=1104 audit(1707769490.046:1421): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.741550] kauditd_printk_skb: 1 callbacks suppressed [ 156.741555] audit: type=1130 audit(1707769495.078:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.82:22-147.75.109.163:34394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.917014] audit: type=1101 audit(1707769495.254:1424): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.931346] audit: type=1103 audit(1707769495.266:1425): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.942435] audit: type=1006 audit(1707769495.266:1426): pid=5004 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 156.949365] audit: type=1300 audit(1707769495.266:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde38dd10 a2=3 a3=1 items=0 ppid=1 pid=5004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.965532] audit: type=1327 audit(1707769495.266:1426): proctitle=737368643A20636F7265205B707269765D [ 156.973616] audit: type=1105 audit(1707769495.300:1427): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.985770] audit: type=1103 audit(1707769495.303:1428): pid=5006 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 157.247378] audit: type=1106 audit(1707769495.584:1429): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 157.260650] audit: type=1104 audit(1707769495.585:1430): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.021936] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 161.024335] IPv6: ADDRCONF(NETDEV_CHANGE): calib20753265b4: link becomes ready [ 162.275212] kauditd_printk_skb: 73 callbacks suppressed [ 162.275217] audit: type=1130 audit(1707769500.612:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.82:22-147.75.109.163:34400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.463549] audit: type=1101 audit(1707769500.799:1456): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.474394] audit: type=1103 audit(1707769500.807:1457): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.485651] audit: type=1006 audit(1707769500.807:1458): pid=5108 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 162.494621] audit: type=1300 audit(1707769500.807:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7ee8620 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.505474] audit: type=1327 audit(1707769500.807:1458): proctitle=737368643A20636F7265205B707269765D [ 162.517864] audit: type=1105 audit(1707769500.855:1459): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.536556] audit: type=1103 audit(1707769500.868:1460): pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.947217] audit: type=1106 audit(1707769501.284:1461): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.962349] audit: type=1104 audit(1707769501.284:1462): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:25:02 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 167.976291] kauditd_printk_skb: 67 callbacks suppressed [ 167.976296] audit: type=1130 audit(1707769506.313:1485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.82:22-147.75.109.163:34468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.161426] audit: type=1101 audit(1707769506.498:1486): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.173298] audit: type=1103 audit(1707769506.510:1487): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.183605] audit: type=1006 audit(1707769506.511:1488): pid=5165 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 168.189657] audit: type=1300 audit(1707769506.511:1488): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6eb20 a2=3 a3=1 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.201015] audit: type=1327 audit(1707769506.511:1488): proctitle=737368643A20636F7265205B707269765D [ 168.217755] audit: type=1105 audit(1707769506.555:1489): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.230799] audit: type=1103 audit(1707769506.558:1490): pid=5167 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.510559] audit: type=1106 audit(1707769506.847:1491): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.524756] audit: type=1104 audit(1707769506.848:1492): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.526409] kauditd_printk_skb: 63 callbacks suppressed [ 177.526414] audit: type=1130 audit(1707769515.863:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.82:22-147.75.109.163:36060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.697682] audit: type=1101 audit(1707769516.035:1537): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.709666] audit: type=1103 audit(1707769516.046:1538): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.719438] audit: type=1006 audit(1707769516.046:1539): pid=5295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 177.726081] audit: type=1300 audit(1707769516.046:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5143830 a2=3 a3=1 items=0 ppid=1 pid=5295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.736246] audit: type=1327 audit(1707769516.046:1539): proctitle=737368643A20636F7265205B707269765D [ 177.756449] audit: type=1105 audit(1707769516.093:1540): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.768848] audit: type=1103 audit(1707769516.105:1541): pid=5297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 178.008260] audit: type=1106 audit(1707769516.345:1542): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 178.020073] audit: type=1104 audit(1707769516.345:1543): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.035407] kauditd_printk_skb: 7 callbacks suppressed [ 183.035412] audit: type=1130 audit(1707769521.371:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.82:22-147.75.109.163:36064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.207618] audit: type=1101 audit(1707769521.543:1548): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.218359] audit: type=1103 audit(1707769521.546:1549): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.228285] audit: type=1006 audit(1707769521.546:1550): pid=5314 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 183.234635] audit: type=1300 audit(1707769521.546:1550): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5cbfa50 a2=3 a3=1 items=0 ppid=1 pid=5314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.245006] audit: type=1327 audit(1707769521.546:1550): proctitle=737368643A20636F7265205B707269765D [ 183.266975] audit: type=1105 audit(1707769521.602:1551): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.279168] audit: type=1103 audit(1707769521.615:1552): pid=5316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.521192] audit: type=1106 audit(1707769521.857:1553): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.533240] audit: type=1104 audit(1707769521.858:1554): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.550761] kauditd_printk_skb: 1 callbacks suppressed [ 188.550765] audit: type=1130 audit(1707769526.887:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.82:22-147.75.109.163:38460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.726253] audit: type=1101 audit(1707769527.062:1557): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.741646] audit: type=1103 audit(1707769527.074:1558): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.752098] audit: type=1006 audit(1707769527.074:1559): pid=5327 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 188.758675] audit: type=1300 audit(1707769527.074:1559): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe12d1f20 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.769196] audit: type=1327 audit(1707769527.074:1559): proctitle=737368643A20636F7265205B707269765D [ 188.776531] audit: type=1105 audit(1707769527.112:1560): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.789482] audit: type=1103 audit(1707769527.125:1561): pid=5329 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 189.034441] audit: type=1106 audit(1707769527.370:1562): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 189.046268] audit: type=1104 audit(1707769527.370:1563): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.062537] kauditd_printk_skb: 37 callbacks suppressed [ 194.062542] audit: type=1130 audit(1707769532.398:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.82:22-147.75.109.163:38464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.237461] audit: type=1101 audit(1707769532.573:1578): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.253411] audit: type=1103 audit(1707769532.588:1579): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.263369] audit: type=1006 audit(1707769532.588:1580): pid=5362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 194.269235] audit: type=1300 audit(1707769532.588:1580): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4ed1c60 a2=3 a3=1 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.280023] audit: type=1327 audit(1707769532.588:1580): proctitle=737368643A20636F7265205B707269765D [ 194.304232] audit: type=1105 audit(1707769532.640:1581): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.316520] audit: type=1103 audit(1707769532.652:1582): pid=5364 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.576486] audit: type=1106 audit(1707769532.912:1583): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.590681] audit: type=1104 audit(1707769532.912:1584): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.603722] kauditd_printk_skb: 13 callbacks suppressed [ 199.603727] audit: type=1130 audit(1707769537.940:1590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.82:22-147.75.109.163:51272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.779843] audit: type=1101 audit(1707769538.116:1591): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.794678] audit: type=1103 audit(1707769538.128:1592): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.804561] audit: type=1006 audit(1707769538.128:1593): pid=5398 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 199.810617] audit: type=1300 audit(1707769538.128:1593): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a0ce00 a2=3 a3=1 items=0 ppid=1 pid=5398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.821203] audit: type=1327 audit(1707769538.128:1593): proctitle=737368643A20636F7265205B707269765D [ 199.839191] audit: type=1105 audit(1707769538.175:1594): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.850368] audit: type=1103 audit(1707769538.178:1595): pid=5400 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.100183] audit: type=1106 audit(1707769538.436:1596): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.112901] audit: type=1104 audit(1707769538.436:1597): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.127960] kauditd_printk_skb: 1 callbacks suppressed [ 205.127964] audit: type=1130 audit(1707769543.464:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.82:22-147.75.109.163:51288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.301560] audit: type=1101 audit(1707769543.637:1600): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.313492] audit: type=1103 audit(1707769543.649:1601): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.323252] audit: type=1006 audit(1707769543.650:1602): pid=5440 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 205.329729] audit: type=1300 audit(1707769543.650:1602): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dca3b0 a2=3 a3=1 items=0 ppid=1 pid=5440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.340530] audit: type=1327 audit(1707769543.650:1602): proctitle=737368643A20636F7265205B707269765D [ 205.364890] audit: type=1105 audit(1707769543.700:1603): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.376274] audit: type=1103 audit(1707769543.703:1604): pid=5445 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.614029] audit: type=1106 audit(1707769543.950:1605): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.626062] audit: type=1104 audit(1707769543.951:1606): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.644226] kauditd_printk_skb: 1 callbacks suppressed [ 210.644230] audit: type=1130 audit(1707769548.980:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.82:22-147.75.109.163:44236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.820208] audit: type=1101 audit(1707769549.156:1609): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.833901] audit: type=1103 audit(1707769549.168:1610): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.845483] audit: type=1006 audit(1707769549.168:1611): pid=5457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 210.851862] audit: type=1300 audit(1707769549.168:1611): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5639d40 a2=3 a3=1 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.862421] audit: type=1327 audit(1707769549.168:1611): proctitle=737368643A20636F7265205B707269765D [ 210.879699] audit: type=1105 audit(1707769549.215:1612): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.891869] audit: type=1103 audit(1707769549.228:1613): pid=5459 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 211.150542] audit: type=1106 audit(1707769549.486:1614): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 211.161944] audit: type=1104 audit(1707769549.487:1615): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 81.186449] audit: type=1131 audit(1707769419.515:984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.82:22-147.75.109.163:33016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.216749] audit: type=1400 audit(1707769426.554:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.224056] audit: type=1400 audit(1707769426.554:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.232109] audit: type=1400 audit(1707769426.554:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.239911] audit: type=1400 audit(1707769426.554:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.251010] audit: type=1400 audit(1707769426.554:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.259376] audit: type=1400 audit(1707769426.554:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.271492] audit: type=1400 audit(1707769426.554:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.280097] audit: type=1400 audit(1707769426.554:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.293128] audit: type=1400 audit(1707769426.554:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.301316] audit: type=1400 audit(1707769426.562:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.622811] kauditd_printk_skb: 357 callbacks suppressed [ 94.622816] audit: type=1325 audit(1707769432.958:1096): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.630729] audit: type=1300 audit(1707769432.958:1096): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.642671] audit: type=1327 audit(1707769432.958:1096): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.651410] audit: type=1325 audit(1707769432.968:1097): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.657479] audit: type=1300 audit(1707769432.968:1097): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.669778] audit: type=1327 audit(1707769432.968:1097): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.677936] audit: type=1325 audit(1707769433.010:1098): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.684257] audit: type=1300 audit(1707769433.010:1098): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc7e9a410 a2=0 a3=ffff9a2ca6c0 items=0 ppid=2902 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.696370] audit: type=1327 audit(1707769433.010:1098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 94.703262] audit: type=1325 audit(1707769433.016:1099): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 100.053071] kauditd_printk_skb: 179 callbacks suppressed [ 100.053075] audit: type=1400 audit(1707769438.389:1156): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.063609] audit: type=1300 audit(1707769438.389:1156): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.078477] audit: type=1327 audit(1707769438.389:1156): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 [ 100.094219] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.108432] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.118498] audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.126881] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.138156] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.146727] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.156296] audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.971830] kauditd_printk_skb: 34 callbacks suppressed [ 106.971835] audit: type=1400 audit(1707769445.308:1163): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.984560] audit: type=1300 audit(1707769445.308:1163): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.998798] audit: type=1327 audit(1707769445.308:1163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 [ 107.009162] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.021202] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.028510] audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.036168] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.043600] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.050950] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.064251] audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 112.380693] kauditd_printk_skb: 34 callbacks suppressed [ 112.380698] audit: type=1325 audit(1707769450.717:1170): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.391115] audit: type=1300 audit(1707769450.717:1170): arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.404060] audit: type=1327 audit(1707769450.717:1170): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.410656] audit: type=1325 audit(1707769450.740:1171): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.417182] audit: type=1300 audit(1707769450.740:1171): arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.432637] audit: type=1327 audit(1707769450.740:1171): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 118.198427] audit: type=1400 audit(1707769456.534:1172): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.206817] audit: type=1300 audit(1707769456.534:1172): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.218183] audit: type=1327 audit(1707769456.534:1172): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 [ 118.229381] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.239872] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.249418] audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.262210] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.271026] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.280140] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.288203] audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 118.408929] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 118.411917] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 121.470195] IPv6: ADDRCONF(NETDEV_CHANGE): calib2d0e29d6a4: link becomes ready [ 122.254866] IPv6: ADDRCONF(NETDEV_CHANGE): calid26096dfee6: link becomes ready [ 122.943595] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 122.946122] IPv6: ADDRCONF(NETDEV_CHANGE): califcf7a05c26f: link becomes ready This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:21 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 123.962121] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.964553] IPv6: ADDRCONF(NETDEV_CHANGE): cali6beea11f2f0: link becomes ready This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:22 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 124.064417] kauditd_printk_skb: 378 callbacks suppressed [ 124.064422] audit: type=1325 audit(1707769462.400:1277): table=filter:108 family=2 entries=38 op=nft_register_chain pid=4403 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 124.074423] audit: type=1300 audit(1707769462.400:1277): arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=ffffe871eb90 a2=0 a3=ffff923b9fa8 items=0 ppid=3817 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.087797] audit: type=1327 audit(1707769462.400:1277): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 124.191052] audit: type=1400 audit(1707769462.527:1278): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.200519] audit: type=1400 audit(1707769462.527:1279): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.214429] audit: type=1400 audit(1707769462.527:1280): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.226346] audit: type=1400 audit(1707769462.527:1281): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.240351] audit: type=1400 audit(1707769462.527:1282): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.251429] audit: type=1400 audit(1707769462.527:1283): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.261235] audit: type=1400 audit(1707769462.527:1284): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:23 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:24 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:24:25 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 129.336583] kauditd_printk_skb: 230 callbacks suppressed [ 129.336588] audit: type=1400 audit(1707769467.673:1351): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 129.351121] audit: type=1300 audit(1707769467.673:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018361b0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 129.364006] audit: type=1327 audit(1707769467.673:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 129.374696] audit: type=1400 audit(1707769467.673:1352): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 129.385692] audit: type=1300 audit(1707769467.673:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63e20 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 129.398590] audit: type=1327 audit(1707769467.673:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 129.608515] audit: type=1400 audit(1707769467.945:1353): avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 129.616064] audit: type=1300 audit(1707769467.945:1353): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.628318] audit: type=1327 audit(1707769467.945:1353): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 [ 129.638747] audit: type=1400 audit(1707769467.945:1354): avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.360536] kauditd_printk_skb: 68 callbacks suppressed [ 135.360541] audit: type=1400 audit(1707769473.697:1374): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.372441] audit: type=1400 audit(1707769473.697:1375): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.384648] audit: type=1300 audit(1707769473.697:1375): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d91240 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.397111] audit: type=1327 audit(1707769473.697:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.408087] audit: type=1300 audit(1707769473.697:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b800 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.420885] audit: type=1327 audit(1707769473.697:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.432429] audit: type=1400 audit(1707769473.718:1376): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 135.442266] audit: type=1300 audit(1707769473.718:1376): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b860 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) [ 135.456866] audit: type=1327 audit(1707769473.718:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 135.467514] audit: type=1400 audit(1707769473.718:1377): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 144.207239] kauditd_printk_skb: 13 callbacks suppressed [ 144.207244] audit: type=1130 audit(1707769482.543:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.82:22-147.75.109.163:54408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.377153] audit: type=1101 audit(1707769482.713:1388): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.390514] audit: type=1103 audit(1707769482.725:1389): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.400920] audit: type=1006 audit(1707769482.725:1390): pid=4926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 144.407248] audit: type=1300 audit(1707769482.725:1390): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc15ec1c0 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.423903] audit: type=1327 audit(1707769482.725:1390): proctitle=737368643A20636F7265205B707269765D [ 144.444566] audit: type=1105 audit(1707769482.780:1391): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.457010] audit: type=1103 audit(1707769482.793:1392): pid=4928 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.763001] audit: type=1106 audit(1707769483.097:1393): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.775759] audit: type=1104 audit(1707769483.097:1394): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.210269] kauditd_printk_skb: 23 callbacks suppressed [ 151.210274] audit: type=1130 audit(1707769489.546:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.82:22-147.75.109.163:53556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.395847] audit: type=1101 audit(1707769489.733:1415): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.411171] audit: type=1103 audit(1707769489.745:1416): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.423591] audit: type=1006 audit(1707769489.745:1417): pid=4987 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 151.431435] audit: type=1300 audit(1707769489.745:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff68462c0 a2=3 a3=1 items=0 ppid=1 pid=4987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.443550] audit: type=1327 audit(1707769489.745:1417): proctitle=737368643A20636F7265205B707269765D [ 151.450066] audit: type=1105 audit(1707769489.783:1418): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.461179] audit: type=1103 audit(1707769489.786:1419): pid=4992 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.708609] audit: type=1106 audit(1707769490.046:1420): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.721184] audit: type=1104 audit(1707769490.046:1421): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.741550] kauditd_printk_skb: 1 callbacks suppressed [ 156.741555] audit: type=1130 audit(1707769495.078:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.82:22-147.75.109.163:34394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.917014] audit: type=1101 audit(1707769495.254:1424): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.931346] audit: type=1103 audit(1707769495.266:1425): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.942435] audit: type=1006 audit(1707769495.266:1426): pid=5004 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 156.949365] audit: type=1300 audit(1707769495.266:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde38dd10 a2=3 a3=1 items=0 ppid=1 pid=5004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.965532] audit: type=1327 audit(1707769495.266:1426): proctitle=737368643A20636F7265205B707269765D [ 156.973616] audit: type=1105 audit(1707769495.300:1427): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.985770] audit: type=1103 audit(1707769495.303:1428): pid=5006 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 157.247378] audit: type=1106 audit(1707769495.584:1429): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 157.260650] audit: type=1104 audit(1707769495.585:1430): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.021936] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 161.024335] IPv6: ADDRCONF(NETDEV_CHANGE): calib20753265b4: link becomes ready [ 162.275212] kauditd_printk_skb: 73 callbacks suppressed [ 162.275217] audit: type=1130 audit(1707769500.612:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.82:22-147.75.109.163:34400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.463549] audit: type=1101 audit(1707769500.799:1456): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.474394] audit: type=1103 audit(1707769500.807:1457): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.485651] audit: type=1006 audit(1707769500.807:1458): pid=5108 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 162.494621] audit: type=1300 audit(1707769500.807:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7ee8620 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.505474] audit: type=1327 audit(1707769500.807:1458): proctitle=737368643A20636F7265205B707269765D [ 162.517864] audit: type=1105 audit(1707769500.855:1459): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.536556] audit: type=1103 audit(1707769500.868:1460): pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.947217] audit: type=1106 audit(1707769501.284:1461): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.962349] audit: type=1104 audit(1707769501.284:1462): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' This is ip-172-31-21-82 (Linux aarch64 5.15.148-flatcar) 20:25:02 SSH host key: SHA256:D72ooUzJ1z0nFED8j8BJ51j/vIlJ47SSB7lA1euItG8 (RSA) SSH host key: SHA256:ydMj45zryCUxdsRydXNodUKK1+NgyffpBxMgarOIh4E (ED25519) SSH host key: SHA256:28M/543uAis2C1KJg534Zr/zQM+9xXoPJgI0609j1RM (ECDSA) eth0: 172.31.21.82 fe80::4c2:d0ff:fee6:eb71 ip-172-31-21-82 login: [ 167.976291] kauditd_printk_skb: 67 callbacks suppressed [ 167.976296] audit: type=1130 audit(1707769506.313:1485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.82:22-147.75.109.163:34468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.161426] audit: type=1101 audit(1707769506.498:1486): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.173298] audit: type=1103 audit(1707769506.510:1487): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.183605] audit: type=1006 audit(1707769506.511:1488): pid=5165 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 168.189657] audit: type=1300 audit(1707769506.511:1488): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6eb20 a2=3 a3=1 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.201015] audit: type=1327 audit(1707769506.511:1488): proctitle=737368643A20636F7265205B707269765D [ 168.217755] audit: type=1105 audit(1707769506.555:1489): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.230799] audit: type=1103 audit(1707769506.558:1490): pid=5167 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.510559] audit: type=1106 audit(1707769506.847:1491): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 168.524756] audit: type=1104 audit(1707769506.848:1492): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.526409] kauditd_printk_skb: 63 callbacks suppressed [ 177.526414] audit: type=1130 audit(1707769515.863:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.82:22-147.75.109.163:36060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.697682] audit: type=1101 audit(1707769516.035:1537): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.709666] audit: type=1103 audit(1707769516.046:1538): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.719438] audit: type=1006 audit(1707769516.046:1539): pid=5295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 177.726081] audit: type=1300 audit(1707769516.046:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5143830 a2=3 a3=1 items=0 ppid=1 pid=5295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.736246] audit: type=1327 audit(1707769516.046:1539): proctitle=737368643A20636F7265205B707269765D [ 177.756449] audit: type=1105 audit(1707769516.093:1540): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.768848] audit: type=1103 audit(1707769516.105:1541): pid=5297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 178.008260] audit: type=1106 audit(1707769516.345:1542): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 178.020073] audit: type=1104 audit(1707769516.345:1543): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.035407] kauditd_printk_skb: 7 callbacks suppressed [ 183.035412] audit: type=1130 audit(1707769521.371:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.82:22-147.75.109.163:36064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.207618] audit: type=1101 audit(1707769521.543:1548): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.218359] audit: type=1103 audit(1707769521.546:1549): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.228285] audit: type=1006 audit(1707769521.546:1550): pid=5314 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 183.234635] audit: type=1300 audit(1707769521.546:1550): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5cbfa50 a2=3 a3=1 items=0 ppid=1 pid=5314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.245006] audit: type=1327 audit(1707769521.546:1550): proctitle=737368643A20636F7265205B707269765D [ 183.266975] audit: type=1105 audit(1707769521.602:1551): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.279168] audit: type=1103 audit(1707769521.615:1552): pid=5316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.521192] audit: type=1106 audit(1707769521.857:1553): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 183.533240] audit: type=1104 audit(1707769521.858:1554): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.550761] kauditd_printk_skb: 1 callbacks suppressed [ 188.550765] audit: type=1130 audit(1707769526.887:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.82:22-147.75.109.163:38460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.726253] audit: type=1101 audit(1707769527.062:1557): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.741646] audit: type=1103 audit(1707769527.074:1558): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.752098] audit: type=1006 audit(1707769527.074:1559): pid=5327 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 188.758675] audit: type=1300 audit(1707769527.074:1559): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe12d1f20 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.769196] audit: type=1327 audit(1707769527.074:1559): proctitle=737368643A20636F7265205B707269765D [ 188.776531] audit: type=1105 audit(1707769527.112:1560): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 188.789482] audit: type=1103 audit(1707769527.125:1561): pid=5329 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 189.034441] audit: type=1106 audit(1707769527.370:1562): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 189.046268] audit: type=1104 audit(1707769527.370:1563): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.062537] kauditd_printk_skb: 37 callbacks suppressed [ 194.062542] audit: type=1130 audit(1707769532.398:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.82:22-147.75.109.163:38464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.237461] audit: type=1101 audit(1707769532.573:1578): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.253411] audit: type=1103 audit(1707769532.588:1579): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.263369] audit: type=1006 audit(1707769532.588:1580): pid=5362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 194.269235] audit: type=1300 audit(1707769532.588:1580): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4ed1c60 a2=3 a3=1 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.280023] audit: type=1327 audit(1707769532.588:1580): proctitle=737368643A20636F7265205B707269765D [ 194.304232] audit: type=1105 audit(1707769532.640:1581): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.316520] audit: type=1103 audit(1707769532.652:1582): pid=5364 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.576486] audit: type=1106 audit(1707769532.912:1583): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.590681] audit: type=1104 audit(1707769532.912:1584): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.603722] kauditd_printk_skb: 13 callbacks suppressed [ 199.603727] audit: type=1130 audit(1707769537.940:1590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.82:22-147.75.109.163:51272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.779843] audit: type=1101 audit(1707769538.116:1591): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.794678] audit: type=1103 audit(1707769538.128:1592): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.804561] audit: type=1006 audit(1707769538.128:1593): pid=5398 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 199.810617] audit: type=1300 audit(1707769538.128:1593): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a0ce00 a2=3 a3=1 items=0 ppid=1 pid=5398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.821203] audit: type=1327 audit(1707769538.128:1593): proctitle=737368643A20636F7265205B707269765D [ 199.839191] audit: type=1105 audit(1707769538.175:1594): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.850368] audit: type=1103 audit(1707769538.178:1595): pid=5400 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.100183] audit: type=1106 audit(1707769538.436:1596): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.112901] audit: type=1104 audit(1707769538.436:1597): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.127960] kauditd_printk_skb: 1 callbacks suppressed [ 205.127964] audit: type=1130 audit(1707769543.464:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.82:22-147.75.109.163:51288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.301560] audit: type=1101 audit(1707769543.637:1600): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.313492] audit: type=1103 audit(1707769543.649:1601): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.323252] audit: type=1006 audit(1707769543.650:1602): pid=5440 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 205.329729] audit: type=1300 audit(1707769543.650:1602): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dca3b0 a2=3 a3=1 items=0 ppid=1 pid=5440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.340530] audit: type=1327 audit(1707769543.650:1602): proctitle=737368643A20636F7265205B707269765D [ 205.364890] audit: type=1105 audit(1707769543.700:1603): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.376274] audit: type=1103 audit(1707769543.703:1604): pid=5445 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.614029] audit: type=1106 audit(1707769543.950:1605): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 205.626062] audit: type=1104 audit(1707769543.951:1606): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.644226] kauditd_printk_skb: 1 callbacks suppressed [ 210.644230] audit: type=1130 audit(1707769548.980:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.82:22-147.75.109.163:44236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.820208] audit: type=1101 audit(1707769549.156:1609): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.833901] audit: type=1103 audit(1707769549.168:1610): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.845483] audit: type=1006 audit(1707769549.168:1611): pid=5457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 210.851862] audit: type=1300 audit(1707769549.168:1611): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5639d40 a2=3 a3=1 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.862421] audit: type=1327 audit(1707769549.168:1611): proctitle=737368643A20636F7265205B707269765D [ 210.879699] audit: type=1105 audit(1707769549.215:1612): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 210.891869] audit: type=1103 audit(1707769549.228:1613): pid=5459 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 211.150542] audit: type=1106 audit(1707769549.486:1614): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 211.161944] audit: type=1104 audit(1707769549.487:1615): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 225.026967] kauditd_printk_skb: 1 callbacks suppressed [ 225.026972] audit: type=1334 audit(1707769563.363:1617): prog-id=93 op=UNLOAD [ 225.031867] audit: type=1334 audit(1707769563.363:1618): prog-id=101 op=UNLOAD [ 226.111617] audit: type=1334 audit(1707769564.448:1619): prog-id=126 op=UNLOAD [ 226.117916] audit: type=1334 audit(1707769564.454:1620): prog-id=129 op=UNLOAD [ 226.230341] audit: type=1400 audit(1707769564.566:1621): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.240536] audit: type=1400 audit(1707769564.574:1622): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.247918] audit: type=1400 audit(1707769564.574:1623): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.255629] audit: type=1400 audit(1707769564.574:1624): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.263360] audit: type=1400 audit(1707769564.574:1625): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.272830] audit: type=1400 audit(1707769564.574:1626): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.199037] kauditd_printk_skb: 119 callbacks suppressed [ 230.199042] audit: type=1400 audit(1707769568.536:1662): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.214357] audit: type=1400 audit(1707769568.536:1663): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.224601] audit: type=1400 audit(1707769568.536:1664): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.232359] audit: type=1400 audit(1707769568.536:1665): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.240549] audit: type=1400 audit(1707769568.536:1666): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.254353] audit: type=1400 audit(1707769568.536:1667): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.262869] audit: type=1400 audit(1707769568.536:1668): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.270818] audit: type=1400 audit(1707769568.536:1669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.279570] audit: type=1400 audit(1707769568.536:1670): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 230.287800] audit: type=1400 audit(1707769568.538:1671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0