;39msystemd-hostnamed.service... [ 20.560768] extend-filesystems[1813]: Resized partition /dev/nvme0n1p9 [ 20.584893] extend-filesystems[1887]: resize2fs 1.46.5 (30-Dec-2021) [ 20.881891] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ OK ] Finished update-ssh-keys-after-ignition.service. [ OK ] Started update-engine.service. [ OK ] Started locksmithd.service. [ 21.004308] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 [ OK ] Finished extend-filesystems.service. [ 20.742064] extend-filesystems[1887]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required [ 20.749228] extend-filesystems[1887]: old_desc_blocks = 1, new_desc_blocks = 1 [ 20.750853] extend-filesystems[1887]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. [ 20.752771] extend-filesystems[1813]: Resized filesystem in /dev/nvme0n1p9 [ OK ] Started systemd-logind.service. [ OK ] Started systemd-hostnamed.service. [ OK ] Started containerd.service. Starting polkit.service... [ OK ] Started polkit.service. [ OK ] Finished coreos-metadata-sshkeys@core.service. 2024/07/02 07:53:38Z: Amazon SSM Agent v2.3.1319.0 is running 2024/07/02 07:53:38Z: OsProductName: Flatcar Container Linux by Kinvolk 2024/07/02 07:53:38Z: OsVersion: 3510.3.5 [ OK ] Finished prepare-helm.service. [ OK ] Finished sshd-keygen.service. Starting issuegen.service... [ OK ] Started sshd@0-172.31.22.2…2-139.178.89.65:34518.service. [ OK ] Finished issuegen.service. Starting systemd-user-sessions.service... [ OK ] Finished systemd-user-sessions.service. [ OK ] Started getty@tty1.service. [ OK ] Started serial-getty@ttyS0.service. [ OK ] Reached target getty.target. [ OK ] Started kubelet.service. [ OK ] Reached target multi-user.target. Starting systemd-update-utmp-runlevel.service... [ OK ] Finished systemd-update-utmp-runlevel.service. This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:53:40 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 25.373895] kauditd_printk_skb: 154 callbacks suppressed [ 25.373898] audit: type=1305 audit(1719906821.602:157): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 25.379069] audit: type=1300 audit(1719906821.602:157): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd3ea533f0 a2=420 a3=0 items=0 ppid=1 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 25.392826] audit: type=1327 audit(1719906821.602:157): proctitle=2F7362696E2F617564697463746C002D44 [ 25.395150] audit: type=1131 audit(1719906821.606:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.417401] audit: type=1130 audit(1719906821.645:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 25.422989] audit: type=1106 audit(1719906821.647:160): pid=2101 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 25.428992] audit: type=1104 audit(1719906821.647:161): pid=2101 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 25.445760] audit: type=1106 audit(1719906821.674:162): pid=2097 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 25.454025] audit: type=1104 audit(1719906821.674:163): pid=2097 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 25.461921] audit: type=1131 audit(1719906821.674:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.230:22-139.178.89.65:60950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.295229] Initializing XFRM netlink socket This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:53:43 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 34.984402] kauditd_printk_skb: 84 callbacks suppressed [ 34.984405] audit: type=1130 audit(1719906831.212:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.997483] audit: type=1131 audit(1719906831.212:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.254567] audit: type=1130 audit(1719906831.482:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 35.331906] audit: type=1131 audit(1719906831.560:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 45.585045] audit: type=1130 audit(1719906841.811:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.608704] audit: type=1131 audit(1719906841.811:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.443064] audit: type=1130 audit(1719906842.671:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 46.865192] audit: type=1130 audit(1719906843.093:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 46.875102] audit: type=1131 audit(1719906843.103:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.090772] audit: type=1130 audit(1719906843.317:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.761560] audit: type=1400 audit(1719906843.990:209): avc: denied { mac_admin } for pid=2487 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 47.773422] audit: type=1401 audit(1719906843.990:209): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 47.783423] audit: type=1300 audit(1719906843.990:209): arch=c000003e syscall=188 success=no exit=-22 a0=c0009d3290 a1=c0009aceb8 a2=c0009d3260 a3=25 items=0 ppid=1 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 47.807256] audit: type=1327 audit(1719906843.990:209): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 51.600040] kauditd_printk_skb: 44 callbacks suppressed [ 51.600044] audit: type=1131 audit(1719906847.827:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.193345] audit: type=1131 audit(1719906852.423:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.736755] audit: type=1130 audit(1719906853.966:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.046386] audit: type=1400 audit(1719906854.276:227): avc: denied { mac_admin } for pid=2843 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 58.052184] audit: type=1401 audit(1719906854.276:227): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 58.055062] audit: type=1300 audit(1719906854.276:227): arch=c000003e syscall=188 success=no exit=-22 a0=c000b69830 a1=c000c30d80 a2=c000b69800 a3=25 items=0 ppid=1 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 58.062715] audit: type=1327 audit(1719906854.276:227): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 58.071817] audit: type=1400 audit(1719906854.276:228): avc: denied { mac_admin } for pid=2843 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 58.077587] audit: type=1401 audit(1719906854.276:228): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 58.080821] audit: type=1300 audit(1719906854.276:228): arch=c000003e syscall=188 success=no exit=-22 a0=c0009f4c20 a1=c000c30d98 a2=c000b698c0 a3=25 items=0 ppid=1 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 58.089705] audit: type=1327 audit(1719906854.276:228): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 58.357862] audit: type=1400 audit(1719906854.587:229): avc: denied { mac_admin } for pid=2843 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 63.932815] kauditd_printk_skb: 3 callbacks suppressed [ 63.932818] audit: type=1106 audit(1719906860.162:230): pid=2134 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 63.945664] audit: type=1104 audit(1719906860.162:231): pid=2134 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 63.977196] audit: type=1106 audit(1719906860.202:232): pid=2130 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 63.986199] audit: type=1104 audit(1719906860.202:233): pid=2130 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 63.992489] audit: type=1131 audit(1719906860.204:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.230:22-139.178.89.65:60966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.542740] audit: type=1325 audit(1719906866.772:235): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 70.546424] audit: type=1300 audit(1719906866.772:235): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7edd6220 a2=0 a3=7ffd7edd620c items=0 ppid=3163 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.554591] audit: type=1327 audit(1719906866.772:235): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 70.558929] audit: type=1325 audit(1719906866.779:236): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3244 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 70.563003] audit: type=1300 audit(1719906866.779:236): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe213ee8d0 a2=0 a3=7ffe213ee8bc items=0 ppid=3163 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.572857] audit: type=1327 audit(1719906866.779:236): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 70.577340] audit: type=1325 audit(1719906866.781:237): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3245 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 70.581383] audit: type=1300 audit(1719906866.781:237): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd56057dd0 a2=0 a3=7ffd56057dbc items=0 ppid=3163 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.589011] audit: type=1327 audit(1719906866.781:237): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 70.592519] audit: type=1325 audit(1719906866.783:238): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 76.541586] kauditd_printk_skb: 143 callbacks suppressed [ 76.541589] audit: type=1325 audit(1719906872.772:286): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 76.546977] audit: type=1300 audit(1719906872.772:286): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fff6151f8e0 a2=0 a3=7fff6151f8cc items=0 ppid=3163 pid=3379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.555003] audit: type=1327 audit(1719906872.772:286): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 76.559418] audit: type=1325 audit(1719906872.772:287): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3379 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 76.564187] audit: type=1300 audit(1719906872.772:287): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff6151f8e0 a2=0 a3=0 items=0 ppid=3163 pid=3379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.572392] audit: type=1327 audit(1719906872.772:287): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 76.581941] audit: type=1325 audit(1719906872.812:288): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 76.587303] audit: type=1300 audit(1719906872.812:288): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffcecda8ad0 a2=0 a3=7ffcecda8abc items=0 ppid=3163 pid=3381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.595468] audit: type=1327 audit(1719906872.812:288): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 76.599313] audit: type=1325 audit(1719906872.826:289): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3381 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.091837] kauditd_printk_skb: 8 callbacks suppressed [ 97.091840] audit: type=1325 audit(1719906893.322:292): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.109091] audit: type=1300 audit(1719906893.322:292): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffeb703c180 a2=0 a3=7ffeb703c16c items=0 ppid=3163 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.134390] audit: type=1327 audit(1719906893.322:292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 97.139494] audit: type=1325 audit(1719906893.362:293): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3978 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.147921] audit: type=1300 audit(1719906893.362:293): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffeb703c180 a2=0 a3=7ffeb703c16c items=0 ppid=3163 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.159056] audit: type=1327 audit(1719906893.362:293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 100.547024] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 100.549309] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 102.395290] audit: type=1400 audit(1719906898.626:294): avc: denied { write } for pid=4076 comm="tee" name="fd" dev="proc" ino=24937 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 102.413239] audit: type=1300 audit(1719906898.626:294): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffed509da1a a2=241 a3=1b6 items=1 ppid=4056 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.427993] audit: type=1307 audit(1719906898.626:294): cwd="/etc/service/enabled/cni/log" [ 102.436801] audit: type=1302 audit(1719906898.626:294): item=0 name="/dev/fd/63" inode=24922 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 102.453986] audit: type=1327 audit(1719906898.626:294): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 102.583624] audit: type=1400 audit(1719906898.814:295): avc: denied { write } for pid=4113 comm="tee" name="fd" dev="proc" ino=25846 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 102.590738] audit: type=1300 audit(1719906898.814:295): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffed2dfda08 a2=241 a3=1b6 items=1 ppid=4070 pid=4113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.614073] audit: type=1307 audit(1719906898.814:295): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" [ 102.617425] audit: type=1302 audit(1719906898.814:295): item=0 name="/dev/fd/63" inode=24953 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 102.625177] audit: type=1327 audit(1719906898.814:295): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:00 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:02 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 106.648378] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 106.651921] IPv6: ADDRCONF(NETDEV_CHANGE): calibed2d160980: link becomes ready [ 107.051979] IPv6: ADDRCONF(NETDEV_CHANGE): calid6bf1e8d6b7: link becomes ready [ 107.270658] IPv6: ADDRCONF(NETDEV_CHANGE): cali9ff8219008c: link becomes ready [ 107.422435] kauditd_printk_skb: 128 callbacks suppressed [ 107.422438] audit: type=1325 audit(1719906903.653:329): table=filter:103 family=2 entries=38 op=nft_register_chain pid=4468 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 107.429350] audit: type=1300 audit(1719906903.653:329): arch=c000003e syscall=46 success=yes exit=19828 a0=3 a1=7fff400e06a0 a2=0 a3=7fff400e068c items=0 ppid=4066 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.460233] audit: type=1327 audit(1719906903.653:329): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 109.065456] audit: type=1106 audit(1719906905.294:330): pid=4392 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 109.065463] audit: type=1104 audit(1719906905.294:331): pid=4392 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 109.067957] audit: type=1131 audit(1719906905.297:332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.230:22-139.178.89.65:45936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:05 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 109.387040] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 109.388578] IPv6: ADDRCONF(NETDEV_CHANGE): cali70769254009: link becomes ready [ 109.596723] audit: type=1325 audit(1719906905.827:333): table=filter:104 family=2 entries=38 op=nft_register_chain pid=4681 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 109.601735] audit: type=1300 audit(1719906905.827:333): arch=c000003e syscall=46 success=yes exit=19408 a0=3 a1=7ffd93d103f0 a2=0 a3=7ffd93d103dc items=0 ppid=4066 pid=4681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.642165] audit: type=1327 audit(1719906905.827:333): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 109.840900] audit: type=1325 audit(1719906906.071:334): table=filter:105 family=2 entries=14 op=nft_register_rule pid=4698 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:06 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:07 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 113.983400] kauditd_printk_skb: 17 callbacks suppressed [ 113.983403] audit: type=1130 audit(1719906910.214:340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.230:22-139.178.89.65:46922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 114.352641] audit: type=1101 audit(1719906910.583:341): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.361582] audit: type=1103 audit(1719906910.592:342): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.380958] audit: type=1006 audit(1719906910.592:343): pid=4823 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 114.390553] audit: type=1300 audit(1719906910.592:343): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff148d2ef0 a2=3 a3=0 items=0 ppid=1 pid=4823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.407340] audit: type=1327 audit(1719906910.592:343): proctitle=737368643A20636F7265205B707269765D [ 114.436871] audit: type=1105 audit(1719906910.667:344): pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 114.451211] audit: type=1103 audit(1719906910.679:345): pid=4826 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 115.525149] audit: type=1106 audit(1719906911.756:346): pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 115.543790] audit: type=1104 audit(1719906911.768:347): pid=4823 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.543222] kauditd_printk_skb: 1 callbacks suppressed [ 120.543225] audit: type=1130 audit(1719906916.773:349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.230:22-139.178.89.65:46928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 120.826739] audit: type=1101 audit(1719906917.057:350): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.862150] audit: type=1103 audit(1719906917.093:351): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.882074] audit: type=1006 audit(1719906917.093:352): pid=5130 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 120.885508] audit: type=1300 audit(1719906917.093:352): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedc9d4b40 a2=3 a3=0 items=0 ppid=1 pid=5130 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.915397] audit: type=1327 audit(1719906917.093:352): proctitle=737368643A20636F7265205B707269765D [ 120.947824] audit: type=1105 audit(1719906917.178:353): pid=5130 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.958942] audit: type=1103 audit(1719906917.178:354): pid=5143 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 121.343847] audit: type=1106 audit(1719906917.574:355): pid=5130 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 121.355497] audit: type=1104 audit(1719906917.575:356): pid=5130 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.746524] kauditd_printk_skb: 23 callbacks suppressed [ 127.746528] audit: type=1130 audit(1719906923.975:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.230:22-139.178.89.65:40254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 127.905304] audit: type=1101 audit(1719906924.136:377): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.912795] audit: type=1103 audit(1719906924.144:378): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.920349] audit: type=1006 audit(1719906924.144:379): pid=5202 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 127.924381] audit: type=1300 audit(1719906924.144:379): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed616f4e0 a2=3 a3=0 items=0 ppid=1 pid=5202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.937291] audit: type=1327 audit(1719906924.144:379): proctitle=737368643A20636F7265205B707269765D [ 127.946045] audit: type=1105 audit(1719906924.172:380): pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.954820] audit: type=1103 audit(1719906924.176:381): pid=5205 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.162392] audit: type=1106 audit(1719906924.393:382): pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.170938] audit: type=1104 audit(1719906924.393:383): pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.187539] kauditd_printk_skb: 1 callbacks suppressed [ 133.187544] audit: type=1130 audit(1719906929.418:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.230:22-139.178.89.65:51620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.364203] audit: type=1101 audit(1719906929.595:386): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.371525] audit: type=1103 audit(1719906929.602:387): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.380280] audit: type=1006 audit(1719906929.602:388): pid=5218 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 133.384088] audit: type=1300 audit(1719906929.602:388): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd0aa2a20 a2=3 a3=0 items=0 ppid=1 pid=5218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.391754] audit: type=1327 audit(1719906929.602:388): proctitle=737368643A20636F7265205B707269765D [ 133.404987] audit: type=1105 audit(1719906929.635:389): pid=5218 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.413966] audit: type=1103 audit(1719906929.644:390): pid=5221 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.679345] audit: type=1106 audit(1719906929.910:391): pid=5218 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.690687] audit: type=1104 audit(1719906929.911:392): pid=5218 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 138.707521] kauditd_printk_skb: 1 callbacks suppressed [ 138.707525] audit: type=1130 audit(1719906934.939:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.230:22-139.178.89.65:51634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.931286] audit: type=1101 audit(1719906935.162:395): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 138.941518] audit: type=1103 audit(1719906935.171:396): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 138.950331] audit: type=1006 audit(1719906935.171:397): pid=5236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 138.955141] audit: type=1300 audit(1719906935.171:397): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2a9779f0 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.966292] audit: type=1327 audit(1719906935.171:397): proctitle=737368643A20636F7265205B707269765D [ 139.011070] audit: type=1105 audit(1719906935.241:398): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.019784] audit: type=1103 audit(1719906935.242:399): pid=5239 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.263188] audit: type=1106 audit(1719906935.494:400): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.270273] audit: type=1104 audit(1719906935.495:401): pid=5236 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.290714] kauditd_printk_skb: 1 callbacks suppressed [ 144.290717] audit: type=1130 audit(1719906940.521:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.230:22-139.178.89.65:33514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 144.488304] audit: type=1101 audit(1719906940.719:404): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.498475] audit: type=1103 audit(1719906940.729:405): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.506431] audit: type=1006 audit(1719906940.729:406): pid=5277 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 144.511663] audit: type=1300 audit(1719906940.729:406): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7aa6e4c0 a2=3 a3=0 items=0 ppid=1 pid=5277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.519366] audit: type=1327 audit(1719906940.729:406): proctitle=737368643A20636F7265205B707269765D [ 144.552569] audit: type=1105 audit(1719906940.780:407): pid=5277 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 144.562240] audit: type=1103 audit(1719906940.782:408): pid=5280 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.065328] audit: type=1106 audit(1719906941.296:409): pid=5277 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.094809] audit: type=1104 audit(1719906941.310:410): pid=5277 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.728775] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 147.730211] IPv6: ADDRCONF(NETDEV_CHANGE): cali329c29e1b1f: link becomes ready [ 150.079850] kauditd_printk_skb: 58 callbacks suppressed [ 150.079854] audit: type=1106 audit(1719906946.310:445): pid=5402 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.101844] audit: type=1104 audit(1719906946.310:446): pid=5402 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.115529] audit: type=1131 audit(1719906946.321:447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.22.230:22-139.178.89.65:33542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.125888] audit: type=1130 audit(1719906946.331:448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.230:22-139.178.89.65:33554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.314136] audit: type=1101 audit(1719906946.545:449): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.325856] audit: type=1103 audit(1719906946.555:450): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.337739] audit: type=1006 audit(1719906946.555:451): pid=5413 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 150.343141] audit: type=1300 audit(1719906946.555:451): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecd226e90 a2=3 a3=0 items=0 ppid=1 pid=5413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.350804] audit: type=1327 audit(1719906946.555:451): proctitle=737368643A20636F7265205B707269765D [ 150.414581] audit: type=1105 audit(1719906946.644:452): pid=5413 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-22-230 (Linux x86_64 5.15.161-flatcar) 07:55:46 SSH host key: SHA256:86PWQ9bigdPbrFBFZ/f5OuDDgJSy+rYSkuun8uVG+iM (ECDSA) SSH host key: SHA256:7lyeL2abngNJJKOUytMzo6kJwCGvVhLo2qkm3pS6jNM (RSA) SSH host key: SHA256:1KqjQolyvnLdBRUDlbZ76k5Bd8gXCnfJYNV5nwgX5Bw (ED25519) eth0: 172.31.22.230 fe80::4c6:f4ff:fefc:a51 ip-172-31-22-230 login: [ 155.806157] kauditd_printk_skb: 22 callbacks suppressed [ 155.806161] audit: type=1130 audit(1719906952.037:463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.230:22-139.178.89.65:58824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.055117] audit: type=1101 audit(1719906952.286:464): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.063369] audit: type=1103 audit(1719906952.294:465): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.071423] audit: type=1006 audit(1719906952.294:466): pid=5493 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 156.076289] audit: type=1300 audit(1719906952.294:466): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc27a8da80 a2=3 a3=0 items=0 ppid=1 pid=5493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.084767] audit: type=1327 audit(1719906952.294:466): proctitle=737368643A20636F7265205B707269765D [ 156.093286] audit: type=1105 audit(1719906952.324:467): pid=5493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.102831] audit: type=1103 audit(1719906952.333:468): pid=5501 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.565998] audit: type=1106 audit(1719906952.797:469): pid=5493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.577126] audit: type=1104 audit(1719906952.797:470): pid=5493 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.592747] kauditd_printk_skb: 13 callbacks suppressed [ 161.592750] audit: type=1130 audit(1719906957.823:476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.230:22-139.178.89.65:58828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.799028] audit: type=1101 audit(1719906958.030:477): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.808478] audit: type=1103 audit(1719906958.039:478): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.815612] audit: type=1006 audit(1719906958.039:479): pid=5539 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 161.819388] audit: type=1300 audit(1719906958.039:479): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1b6c6750 a2=3 a3=0 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.826112] audit: type=1327 audit(1719906958.039:479): proctitle=737368643A20636F7265205B707269765D [ 161.841884] audit: type=1105 audit(1719906958.073:480): pid=5539 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 161.849600] audit: type=1103 audit(1719906958.073:481): pid=5542 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.193658] audit: type=1106 audit(1719906958.424:482): pid=5539 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.203526] audit: type=1104 audit(1719906958.424:483): pid=5539 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.208655] kauditd_printk_skb: 1 callbacks suppressed [ 167.208658] audit: type=1130 audit(1719906963.439:485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.230:22-139.178.89.65:46966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.423167] audit: type=1101 audit(1719906963.654:486): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.433811] audit: type=1103 audit(1719906963.664:487): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.443586] audit: type=1006 audit(1719906963.665:488): pid=5556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 167.455102] audit: type=1300 audit(1719906963.665:488): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff12471040 a2=3 a3=0 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.470724] audit: type=1327 audit(1719906963.665:488): proctitle=737368643A20636F7265205B707269765D [ 167.479817] audit: type=1105 audit(1719906963.709:489): pid=5556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.493099] audit: type=1103 audit(1719906963.711:490): pid=5559 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.676606] audit: type=1106 audit(1719906963.907:491): pid=5556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.683495] audit: type=1104 audit(1719906963.909:492): pid=5556 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.721366] kauditd_printk_skb: 1 callbacks suppressed [ 172.721369] audit: type=1130 audit(1719906968.952:494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.230:22-139.178.89.65:49196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.922956] audit: type=1101 audit(1719906969.152:495): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.930350] audit: type=1103 audit(1719906969.160:496): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.937725] audit: type=1006 audit(1719906969.161:497): pid=5593 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 172.947560] audit: type=1300 audit(1719906969.161:497): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc709f470 a2=3 a3=0 items=0 ppid=1 pid=5593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.957993] audit: type=1327 audit(1719906969.161:497): proctitle=737368643A20636F7265205B707269765D [ 172.970697] audit: type=1105 audit(1719906969.201:498): pid=5593 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.986179] audit: type=1103 audit(1719906969.216:499): pid=5596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.320428] audit: type=1106 audit(1719906969.551:500): pid=5593 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.336450] audit: type=1104 audit(1719906969.551:501): pid=5593 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.356609] kauditd_printk_skb: 1 callbacks suppressed [ 178.356612] audit: type=1130 audit(1719906974.587:503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.230:22-139.178.89.65:49210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.591439] audit: type=1101 audit(1719906974.822:504): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.613517] audit: type=1103 audit(1719906974.843:505): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.626622] audit: type=1006 audit(1719906974.845:506): pid=5612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 178.638306] audit: type=1300 audit(1719906974.845:506): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2f6fde00 a2=3 a3=0 items=0 ppid=1 pid=5612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.683385] audit: type=1327 audit(1719906974.845:506): proctitle=737368643A20636F7265205B707269765D [ 178.687556] audit: type=1105 audit(1719906974.907:507): pid=5612 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.697868] audit: type=1103 audit(1719906974.913:508): pid=5615 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.059894] audit: type=1106 audit(1719906975.291:509): pid=5612 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.067288] audit: type=1104 audit(1719906975.293:510): pid=5612 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.083101] kauditd_printk_skb: 1 callbacks suppressed [ 184.083103] audit: type=1130 audit(1719906980.314:512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.230:22-139.178.89.65:46792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.274837] audit: type=1101 audit(1719906980.506:513): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.282165] audit: type=1103 audit(1719906980.513:514): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.289333] audit: type=1006 audit(1719906980.514:515): pid=5649 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 184.293421] audit: type=1300 audit(1719906980.514:515): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccfa03a90 a2=3 a3=0 items=0 ppid=1 pid=5649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.300745] audit: type=1327 audit(1719906980.514:515): proctitle=737368643A20636F7265205B707269765D [ 184.319191] audit: type=1105 audit(1719906980.550:516): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.328617] audit: type=1103 audit(1719906980.558:517): pid=5652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.724245] audit: type=1106 audit(1719906980.955:518): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.735162] audit: type=1104 audit(1719906980.955:519): pid=5649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.768033] kauditd_printk_skb: 1 callbacks suppressed [ 189.768037] audit: type=1130 audit(1719906985.999:521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.230:22-139.178.89.65:46806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.954799] audit: type=1101 audit(1719906986.186:522): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.965534] audit: type=1103 audit(1719906986.196:523): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.973912] audit: type=1006 audit(1719906986.196:524): pid=5668 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 189.979109] audit: type=1300 audit(1719906986.196:524): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca06a7100 a2=3 a3=0 items=0 ppid=1 pid=5668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.992638] audit: type=1327 audit(1719906986.196:524): proctitle=737368643A20636F7265205B707269765D [ 189.998083] audit: type=1105 audit(1719906986.226:525): pid=5668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.009218] audit: type=1103 audit(1719906986.229:526): pid=5672 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.305132] audit: type=1106 audit(1719906986.536:527): pid=5668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.315175] audit: type=1104 audit(1719906986.546:528): pid=5668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.891100] kauditd_printk_skb: 1 callbacks suppressed [ 214.891103] audit: type=1106 audit(1719907011.122:530): pid=2033 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.906818] audit: type=1104 audit(1719907011.124:531): pid=2033 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.915938] audit: type=1131 audit(1719907011.134:532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.22.230:22-139.178.89.65:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-addon\x2dconfig.slice. [ OK ] Removed slice system-addon\x2drun.slice. [ OK ] Removed slice system-modprobe.slice. [ OK ] Removed slice system-sshd.slice. [ OK ] Removed slice system-system\x2dcloudinit.slice. [ OK ] Stopped target multi-user.target. [ OK ] Stopped target getty.target. [ OK ] Stopped target machines.target. [ OK ] Stopped target nss-lookup.target. [ OK ] Stopped target remote-cryptsetup.target. [ OK ] Stopped target timers.target. [ OK ] Stopped logrotate.timer. [ OK ] Stopped mdadm.timer. [ OK ] Stopped systemd-tmpfiles-clean.timer. [ OK ] Stopped target time-set.target. [ OK ] Stopped target user-config.target. [ OK ] Stopped target system-config.target. Unmounting boot.mount... Stopping amazon-ssm-agent.service... [ OK ] Stopped coreos-metadata-sshkeys@core.service. [ 215.590241] audit: type=1131 audit(1719907011.821:533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-coreos\x2dmetadata\x2dsshkeys.slice. Stopping docker.service... [ OK ] Stopped ensure-sysext.service. [ 215.614682] audit: type=1131 audit(1719907011.845:534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping getty@tty1.service... Stopping kubelet.service... Stopping locksmithd.service... Stopping polkit.service... [ OK ] Stopped prepare-helm.service. [ 215.629410] audit: type=1131 audit(1719907011.860:535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping serial-getty@ttyS0.service... [ OK ] Stopped sshd-keygen.service. Stopping systemd-logind.service... [ OK ] Stopped systemd-machine-id-commit.service. [ OK ] Stopped target first-boot-complete.target. [ 215.643605] audit: type=1131 audit(1719907011.869:536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.649416] audit: type=1131 audit(1719907011.869:537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping systemd-random-seed.service... [ OK ] Stopped update-ssh-keys-after-ignition.service. Stopping user@500.service... [ 215.672747] audit: type=1131 audit(1719907011.899:538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=update-ssh-keys-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped getty@tty1.service. [ 215.710788] audit: type=1131 audit(1719907011.942:539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped systemd-logind.service. [ OK ] Stopped locksmithd.service. [ OK ] Stopped polkit.service. [ OK ] Stopped serial-getty@ttyS0.service. [ OK ] Stopped user@500.service. [ OK ] Stopped docker.service. [ OK ] Stopped kubelet.service. [ OK ] Unmounted boot.mount. [ OK ] Stopped systemd-random-seed.service. [ OK ] Removed slice system-getty.slice. [ OK ] Removed slice system-serial\x2dgetty.slice. Stopping containerd.service... [ OK ] Stopped systemd-fsck@dev-d…2dlabel-EFI\x2dSYSTEM.service. Stopping systemd-user-sessions.service... Stopping update-engine.service... Stopping user-runtime-dir@500.service... [ OK ] Stopped containerd.service. [ OK ] Unmounted run-user-500.mount. [ OK ] Stopped systemd-user-sessions.service. [ OK ] Stopped user-runtime-dir@500.service. [ OK ] Removed slice user-500.slice. [ OK ] Stopped target remote-fs.target. Stopping dbus.service... [ OK ] Stopped update-engine.service. [ OK ] Stopped dbus.service.