ntk_skb: 619 callbacks suppressed [ 69.344683] audit: type=1400 audit(1719881131.055:527): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=8268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.356532] audit: type=1300 audit(1719881131.055:527): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000400570 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 69.370158] audit: type=1327 audit(1719881131.055:527): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 69.379401] audit: type=1400 audit(1719881131.065:528): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.387702] audit: type=1300 audit(1719881131.065:528): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400050c520 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 69.398356] audit: type=1327 audit(1719881131.065:528): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 69.407591] audit: type=1400 audit(1719881131.086:529): avc: denied { watch } for pid=2569 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=8268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c675 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.415974] audit: type=1300 audit(1719881131.086:529): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40050c8600 a2=fc6 a3=0 items=0 ppid=2420 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c675 key=(null) [ 69.428501] audit: type=1327 audit(1719881131.086:529): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 69.437120] audit: type=1400 audit(1719881131.086:530): avc: denied { watch } for pid=2569 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c675 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 74.458215] kauditd_printk_skb: 268 callbacks suppressed [ 74.458220] audit: type=1400 audit(1719881136.169:783): avc: denied { mac_admin } for pid=2820 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.469891] audit: type=1401 audit(1719881136.169:783): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 74.478793] audit: type=1300 audit(1719881136.169:783): arch=c00000b7 syscall=5 success=no exit=-22 a0=400072ab40 a1=4000eed950 a2=400072ab10 a3=25 items=0 ppid=1 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.489438] audit: type=1327 audit(1719881136.169:783): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 78.785158] audit: type=1106 audit(1719881140.497:784): pid=2015 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.792983] audit: type=1104 audit(1719881140.497:785): pid=2015 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 78.818138] audit: type=1106 audit(1719881140.530:786): pid=2012 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 78.829048] audit: type=1104 audit(1719881140.530:787): pid=2012 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 78.837050] audit: type=1131 audit(1719881140.536:788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.140:22-139.178.89.65:33772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 83.464964] audit: type=1400 audit(1719881145.178:789): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 83.473597] audit: type=1300 audit(1719881145.178:789): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400121c120 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.484369] audit: type=1327 audit(1719881145.178:789): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.493407] audit: type=1400 audit(1719881145.178:790): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 83.501276] audit: type=1300 audit(1719881145.178:790): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400121c320 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.515209] audit: type=1327 audit(1719881145.178:790): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.525179] audit: type=1400 audit(1719881145.184:791): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 83.533186] audit: type=1300 audit(1719881145.184:791): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400121c4c0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.543534] audit: type=1327 audit(1719881145.184:791): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.552115] audit: type=1400 audit(1719881145.184:792): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 89.596040] kauditd_printk_skb: 315 callbacks suppressed [ 89.596045] audit: type=1400 audit(1719881151.311:887): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.605556] audit: type=1400 audit(1719881151.311:888): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.611828] audit: type=1400 audit(1719881151.311:889): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.622074] audit: type=1400 audit(1719881151.311:890): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.629742] audit: type=1400 audit(1719881151.311:891): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.637870] audit: type=1400 audit(1719881151.311:892): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.648353] audit: type=1400 audit(1719881151.311:893): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.656085] audit: type=1400 audit(1719881151.311:894): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.662744] audit: type=1400 audit(1719881151.311:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.669443] audit: type=1400 audit(1719881151.313:896): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.780123] kauditd_printk_skb: 59 callbacks suppressed [ 94.780128] audit: type=1400 audit(1719881156.495:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.790918] audit: type=1400 audit(1719881156.495:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.802751] audit: type=1400 audit(1719881156.495:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.811771] audit: type=1400 audit(1719881156.495:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.823274] audit: type=1400 audit(1719881156.495:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.834493] audit: type=1400 audit(1719881156.495:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.840754] audit: type=1400 audit(1719881156.495:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.860483] audit: type=1400 audit(1719881156.495:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.869767] audit: type=1400 audit(1719881156.495:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.885510] audit: type=1400 audit(1719881156.497:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.233377] kauditd_printk_skb: 211 callbacks suppressed [ 105.233382] audit: type=1400 audit(1719881166.950:972): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.241721] audit: type=1300 audit(1719881166.950:972): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3254 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.252163] audit: type=1327 audit(1719881166.950:972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636563626434616464363339383535313332323038373634383536 [ 105.261148] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.277109] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.283390] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.290405] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.296906] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.304763] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.312085] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.118592] kauditd_printk_skb: 34 callbacks suppressed [ 115.118597] audit: type=1400 audit(1719881176.836:979): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.127805] audit: type=1300 audit(1719881176.836:979): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3254 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.141474] audit: type=1327 audit(1719881176.836:979): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133316665646633633064623966633637653332313530616231323466 [ 115.153173] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.160005] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.166881] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.173027] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.180231] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.187646] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.196937] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.420040] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 115.422551] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:20 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:21 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 121.645149] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.647483] IPv6: ADDRCONF(NETDEV_CHANGE): cali0befb1c6c95: link becomes ready [ 121.718040] kauditd_printk_skb: 163 callbacks suppressed [ 121.718045] audit: type=1325 audit(1719881183.435:1014): table=filter:101 family=2 entries=34 op=nft_register_chain pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 121.726186] audit: type=1300 audit(1719881183.435:1014): arch=c00000b7 syscall=211 success=yes exit=19148 a0=3 a1=ffffd6decb10 a2=0 a3=ffffbaf51fa8 items=0 ppid=3796 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.738172] audit: type=1327 audit(1719881183.435:1014): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 121.822012] audit: type=1400 audit(1719881183.539:1015): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.828491] audit: type=1400 audit(1719881183.539:1016): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.837129] audit: type=1400 audit(1719881183.539:1017): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.843951] audit: type=1400 audit(1719881183.539:1018): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.851006] audit: type=1400 audit(1719881183.539:1019): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.857932] audit: type=1400 audit(1719881183.539:1020): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.864393] audit: type=1400 audit(1719881183.539:1021): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.087044] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.089139] IPv6: ADDRCONF(NETDEV_CHANGE): cali3f4e9410b45: link becomes ready [ 123.208781] IPv6: ADDRCONF(NETDEV_CHANGE): calid47c8735877: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:26 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 124.601967] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.606335] IPv6: ADDRCONF(NETDEV_CHANGE): cali55bdbf94470: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:27 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:28 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 126.849077] kauditd_printk_skb: 416 callbacks suppressed [ 126.849082] audit: type=1325 audit(1719881188.566:1147): table=filter:111 family=2 entries=8 op=nft_register_rule pid=4574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.856361] audit: type=1300 audit(1719881188.566:1147): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffd6c8f900 a2=0 a3=1 items=0 ppid=2962 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.884006] audit: type=1327 audit(1719881188.566:1147): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 126.938309] audit: type=1325 audit(1719881188.601:1148): table=nat:112 family=2 entries=56 op=nft_register_chain pid=4574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.943409] audit: type=1300 audit(1719881188.601:1148): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffd6c8f900 a2=0 a3=1 items=0 ppid=2962 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.964017] audit: type=1327 audit(1719881188.601:1148): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:29 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 127.590517] audit: type=1400 audit(1719881189.308:1149): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.596827] audit: type=1400 audit(1719881189.308:1150): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.608361] audit: type=1400 audit(1719881189.308:1151): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.616336] audit: type=1400 audit(1719881189.308:1152): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.318111] kauditd_printk_skb: 131 callbacks suppressed [ 133.318116] audit: type=1130 audit(1719881195.034:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.140:22-139.178.89.65:51562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.501684] audit: type=1101 audit(1719881195.218:1191): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.513209] audit: type=1103 audit(1719881195.229:1192): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.521700] audit: type=1006 audit(1719881195.230:1193): pid=4697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 133.527325] audit: type=1300 audit(1719881195.230:1193): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5c150d0 a2=3 a3=1 items=0 ppid=1 pid=4697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.537407] audit: type=1327 audit(1719881195.230:1193): proctitle=737368643A20636F7265205B707269765D [ 133.557125] audit: type=1105 audit(1719881195.273:1194): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.567272] audit: type=1103 audit(1719881195.276:1195): pid=4699 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.815734] audit: type=1106 audit(1719881195.532:1196): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.826781] audit: type=1104 audit(1719881195.533:1197): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 138.845845] kauditd_printk_skb: 1 callbacks suppressed [ 138.845850] audit: type=1130 audit(1719881200.561:1199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.140:22-139.178.89.65:49534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.023798] audit: type=1101 audit(1719881200.739:1200): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.034799] audit: type=1103 audit(1719881200.750:1201): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.044107] audit: type=1006 audit(1719881200.750:1202): pid=4947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 139.049477] audit: type=1300 audit(1719881200.750:1202): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc9baba0 a2=3 a3=1 items=0 ppid=1 pid=4947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.058802] audit: type=1327 audit(1719881200.750:1202): proctitle=737368643A20636F7265205B707269765D [ 139.081109] audit: type=1105 audit(1719881200.796:1203): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.091515] audit: type=1103 audit(1719881200.807:1204): pid=4949 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.337769] audit: type=1106 audit(1719881201.054:1205): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.349912] audit: type=1104 audit(1719881201.057:1206): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.380016] kauditd_printk_skb: 35 callbacks suppressed [ 145.380021] audit: type=1130 audit(1719881207.097:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.140:22-139.178.89.65:49546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.552063] audit: type=1101 audit(1719881207.267:1231): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.564420] audit: type=1103 audit(1719881207.269:1232): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.576862] audit: type=1006 audit(1719881207.269:1233): pid=4983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 145.586151] audit: type=1300 audit(1719881207.269:1233): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9f3cf40 a2=3 a3=1 items=0 ppid=1 pid=4983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.595954] audit: type=1327 audit(1719881207.269:1233): proctitle=737368643A20636F7265205B707269765D [ 145.607832] audit: type=1105 audit(1719881207.324:1234): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.620767] audit: type=1103 audit(1719881207.337:1235): pid=4986 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.912115] audit: type=1106 audit(1719881207.629:1236): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.923155] audit: type=1104 audit(1719881207.629:1237): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.938127] kauditd_printk_skb: 1 callbacks suppressed [ 150.938132] audit: type=1130 audit(1719881212.655:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.140:22-139.178.89.65:41330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.114714] audit: type=1101 audit(1719881212.831:1240): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.123183] audit: type=1103 audit(1719881212.837:1241): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.131602] audit: type=1006 audit(1719881212.837:1242): pid=5028 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 151.137539] audit: type=1300 audit(1719881212.837:1242): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4e4ac00 a2=3 a3=1 items=0 ppid=1 pid=5028 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.146652] audit: type=1327 audit(1719881212.837:1242): proctitle=737368643A20636F7265205B707269765D [ 151.168162] audit: type=1105 audit(1719881212.884:1243): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.178635] audit: type=1103 audit(1719881212.887:1244): pid=5030 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.426107] audit: type=1106 audit(1719881213.142:1245): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.437908] audit: type=1104 audit(1719881213.142:1246): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.456304] kauditd_printk_skb: 1 callbacks suppressed [ 156.456309] audit: type=1130 audit(1719881218.173:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.140:22-139.178.89.65:48346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.633434] audit: type=1101 audit(1719881218.348:1249): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.642515] audit: type=1103 audit(1719881218.359:1250): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.652235] audit: type=1006 audit(1719881218.359:1251): pid=5043 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 156.660516] audit: type=1300 audit(1719881218.359:1251): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfaf3c10 a2=3 a3=1 items=0 ppid=1 pid=5043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.670922] audit: type=1327 audit(1719881218.359:1251): proctitle=737368643A20636F7265205B707269765D [ 156.694963] audit: type=1105 audit(1719881218.411:1252): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.706923] audit: type=1103 audit(1719881218.423:1253): pid=5045 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.984039] audit: type=1106 audit(1719881218.698:1254): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.994672] audit: type=1104 audit(1719881218.699:1255): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.008927] kauditd_printk_skb: 1 callbacks suppressed [ 162.008933] audit: type=1130 audit(1719881223.725:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.140:22-139.178.89.65:48362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.181961] audit: type=1101 audit(1719881223.898:1258): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.192496] audit: type=1103 audit(1719881223.909:1259): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.201161] audit: type=1006 audit(1719881223.909:1260): pid=5084 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 162.207261] audit: type=1300 audit(1719881223.909:1260): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff03001e0 a2=3 a3=1 items=0 ppid=1 pid=5084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.217063] audit: type=1327 audit(1719881223.909:1260): proctitle=737368643A20636F7265205B707269765D [ 162.228040] audit: type=1105 audit(1719881223.945:1261): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.238504] audit: type=1103 audit(1719881223.955:1262): pid=5086 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.492457] audit: type=1106 audit(1719881224.209:1263): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.503529] audit: type=1104 audit(1719881224.209:1264): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.088440] kauditd_printk_skb: 43 callbacks suppressed [ 167.088445] audit: type=1106 audit(1719881228.805:1294): pid=5122 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.101221] audit: type=1104 audit(1719881228.805:1295): pid=5122 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.113129] audit: type=1131 audit(1719881228.818:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.140:22-139.178.89.65:51902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.129538] audit: type=1130 audit(1719881228.846:1297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.140:22-139.178.89.65:51904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.309507] audit: type=1101 audit(1719881229.026:1298): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.318870] audit: type=1103 audit(1719881229.029:1299): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.327379] audit: type=1006 audit(1719881229.029:1300): pid=5155 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 167.332853] audit: type=1300 audit(1719881229.029:1300): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c2e4d0 a2=3 a3=1 items=0 ppid=1 pid=5155 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.341911] audit: type=1327 audit(1719881229.029:1300): proctitle=737368643A20636F7265205B707269765D [ 167.361875] audit: type=1105 audit(1719881229.078:1301): pid=5155 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.636136] kauditd_printk_skb: 4 callbacks suppressed [ 172.636140] audit: type=1130 audit(1719881234.352:1306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.140:22-139.178.89.65:51920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.807303] audit: type=1101 audit(1719881234.523:1307): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.818153] audit: type=1103 audit(1719881234.534:1308): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.826453] audit: type=1006 audit(1719881234.539:1309): pid=5174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 172.831860] audit: type=1300 audit(1719881234.539:1309): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd79ecfa0 a2=3 a3=1 items=0 ppid=1 pid=5174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.841684] audit: type=1327 audit(1719881234.539:1309): proctitle=737368643A20636F7265205B707269765D [ 172.858760] audit: type=1105 audit(1719881234.575:1310): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.868903] audit: type=1103 audit(1719881234.578:1311): pid=5176 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.098290] audit: type=1106 audit(1719881234.814:1312): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.108798] audit: type=1104 audit(1719881234.814:1313): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.127672] kauditd_printk_skb: 7 callbacks suppressed [ 178.127676] audit: type=1130 audit(1719881239.844:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.140:22-139.178.89.65:55576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.310569] audit: type=1101 audit(1719881240.025:1318): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.321118] audit: type=1103 audit(1719881240.036:1319): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.332144] audit: type=1006 audit(1719881240.036:1320): pid=5201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 178.338037] audit: type=1300 audit(1719881240.036:1320): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa158050 a2=3 a3=1 items=0 ppid=1 pid=5201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.348943] audit: type=1327 audit(1719881240.036:1320): proctitle=737368643A20636F7265205B707269765D [ 178.354972] audit: type=1105 audit(1719881240.065:1321): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.364743] audit: type=1103 audit(1719881240.070:1322): pid=5216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.592252] audit: type=1106 audit(1719881240.308:1323): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.602783] audit: type=1104 audit(1719881240.308:1324): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.621875] kauditd_printk_skb: 1 callbacks suppressed [ 183.621879] audit: type=1130 audit(1719881245.338:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.140:22-139.178.89.65:55582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.804674] audit: type=1101 audit(1719881245.521:1327): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.814084] audit: type=1103 audit(1719881245.521:1328): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.825554] audit: type=1006 audit(1719881245.521:1329): pid=5231 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 183.833326] audit: type=1300 audit(1719881245.521:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8f32f30 a2=3 a3=1 items=0 ppid=1 pid=5231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.844815] audit: type=1327 audit(1719881245.521:1329): proctitle=737368643A20636F7265205B707269765D [ 183.857658] audit: type=1105 audit(1719881245.573:1330): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.871548] audit: type=1103 audit(1719881245.585:1331): pid=5233 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.161439] audit: type=1106 audit(1719881245.876:1332): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.176463] audit: type=1104 audit(1719881245.876:1333): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.617644] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 185.619780] IPv6: ADDRCONF(NETDEV_CHANGE): cali1d60fea1592: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:47:29 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 189.185415] kauditd_printk_skb: 73 callbacks suppressed [ 189.185420] audit: type=1130 audit(1719881250.903:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.140:22-139.178.89.65:47068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.350888] audit: type=1400 audit(1719881251.068:1359): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.368825] audit: type=1300 audit(1719881251.068:1359): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019983e0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 189.383851] audit: type=1327 audit(1719881251.068:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 189.396845] audit: type=1400 audit(1719881251.082:1360): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=8268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.409214] audit: type=1300 audit(1719881251.082:1360): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018370e0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.484369] audit: type=1327 audit(1719881145.178:789): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.493407] audit: type=1400 audit(1719881145.178:790): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 83.501276] audit: type=1300 audit(1719881145.178:790): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400121c320 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.515209] audit: type=1327 audit(1719881145.178:790): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.525179] audit: type=1400 audit(1719881145.184:791): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 83.533186] audit: type=1300 audit(1719881145.184:791): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400121c4c0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 83.543534] audit: type=1327 audit(1719881145.184:791): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 83.552115] audit: type=1400 audit(1719881145.184:792): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 89.596040] kauditd_printk_skb: 315 callbacks suppressed [ 89.596045] audit: type=1400 audit(1719881151.311:887): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.605556] audit: type=1400 audit(1719881151.311:888): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.611828] audit: type=1400 audit(1719881151.311:889): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.622074] audit: type=1400 audit(1719881151.311:890): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.629742] audit: type=1400 audit(1719881151.311:891): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.637870] audit: type=1400 audit(1719881151.311:892): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.648353] audit: type=1400 audit(1719881151.311:893): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.656085] audit: type=1400 audit(1719881151.311:894): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.662744] audit: type=1400 audit(1719881151.311:895): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.669443] audit: type=1400 audit(1719881151.313:896): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.780123] kauditd_printk_skb: 59 callbacks suppressed [ 94.780128] audit: type=1400 audit(1719881156.495:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.790918] audit: type=1400 audit(1719881156.495:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.802751] audit: type=1400 audit(1719881156.495:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.811771] audit: type=1400 audit(1719881156.495:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.823274] audit: type=1400 audit(1719881156.495:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.834493] audit: type=1400 audit(1719881156.495:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.840754] audit: type=1400 audit(1719881156.495:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.860483] audit: type=1400 audit(1719881156.495:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.869767] audit: type=1400 audit(1719881156.495:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 94.885510] audit: type=1400 audit(1719881156.497:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.233377] kauditd_printk_skb: 211 callbacks suppressed [ 105.233382] audit: type=1400 audit(1719881166.950:972): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.241721] audit: type=1300 audit(1719881166.950:972): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3254 pid=3445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.252163] audit: type=1327 audit(1719881166.950:972): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138636563626434616464363339383535313332323038373634383536 [ 105.261148] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.277109] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.283390] audit: type=1400 audit(1719881166.950:973): avc: denied { bpf } for pid=3445 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.290405] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.296906] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.304763] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 105.312085] audit: type=1400 audit(1719881166.950:973): avc: denied { perfmon } for pid=3445 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.118592] kauditd_printk_skb: 34 callbacks suppressed [ 115.118597] audit: type=1400 audit(1719881176.836:979): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.127805] audit: type=1300 audit(1719881176.836:979): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3254 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.141474] audit: type=1327 audit(1719881176.836:979): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133316665646633633064623966633637653332313530616231323466 [ 115.153173] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.160005] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.166881] audit: type=1400 audit(1719881176.836:980): avc: denied { bpf } for pid=3720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.173027] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.180231] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.187646] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.196937] audit: type=1400 audit(1719881176.836:980): avc: denied { perfmon } for pid=3720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.420040] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 115.422551] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:20 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:21 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 121.645149] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.647483] IPv6: ADDRCONF(NETDEV_CHANGE): cali0befb1c6c95: link becomes ready [ 121.718040] kauditd_printk_skb: 163 callbacks suppressed [ 121.718045] audit: type=1325 audit(1719881183.435:1014): table=filter:101 family=2 entries=34 op=nft_register_chain pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 121.726186] audit: type=1300 audit(1719881183.435:1014): arch=c00000b7 syscall=211 success=yes exit=19148 a0=3 a1=ffffd6decb10 a2=0 a3=ffffbaf51fa8 items=0 ppid=3796 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.738172] audit: type=1327 audit(1719881183.435:1014): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 121.822012] audit: type=1400 audit(1719881183.539:1015): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.828491] audit: type=1400 audit(1719881183.539:1016): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.837129] audit: type=1400 audit(1719881183.539:1017): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.843951] audit: type=1400 audit(1719881183.539:1018): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.851006] audit: type=1400 audit(1719881183.539:1019): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.857932] audit: type=1400 audit(1719881183.539:1020): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.864393] audit: type=1400 audit(1719881183.539:1021): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.087044] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.089139] IPv6: ADDRCONF(NETDEV_CHANGE): cali3f4e9410b45: link becomes ready [ 123.208781] IPv6: ADDRCONF(NETDEV_CHANGE): calid47c8735877: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:26 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 124.601967] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.606335] IPv6: ADDRCONF(NETDEV_CHANGE): cali55bdbf94470: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:27 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:28 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 126.849077] kauditd_printk_skb: 416 callbacks suppressed [ 126.849082] audit: type=1325 audit(1719881188.566:1147): table=filter:111 family=2 entries=8 op=nft_register_rule pid=4574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.856361] audit: type=1300 audit(1719881188.566:1147): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffd6c8f900 a2=0 a3=1 items=0 ppid=2962 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.884006] audit: type=1327 audit(1719881188.566:1147): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 126.938309] audit: type=1325 audit(1719881188.601:1148): table=nat:112 family=2 entries=56 op=nft_register_chain pid=4574 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.943409] audit: type=1300 audit(1719881188.601:1148): arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffd6c8f900 a2=0 a3=1 items=0 ppid=2962 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.964017] audit: type=1327 audit(1719881188.601:1148): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:46:29 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 127.590517] audit: type=1400 audit(1719881189.308:1149): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.596827] audit: type=1400 audit(1719881189.308:1150): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.608361] audit: type=1400 audit(1719881189.308:1151): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.616336] audit: type=1400 audit(1719881189.308:1152): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.318111] kauditd_printk_skb: 131 callbacks suppressed [ 133.318116] audit: type=1130 audit(1719881195.034:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.140:22-139.178.89.65:51562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.501684] audit: type=1101 audit(1719881195.218:1191): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.513209] audit: type=1103 audit(1719881195.229:1192): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.521700] audit: type=1006 audit(1719881195.230:1193): pid=4697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 133.527325] audit: type=1300 audit(1719881195.230:1193): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5c150d0 a2=3 a3=1 items=0 ppid=1 pid=4697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.537407] audit: type=1327 audit(1719881195.230:1193): proctitle=737368643A20636F7265205B707269765D [ 133.557125] audit: type=1105 audit(1719881195.273:1194): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.567272] audit: type=1103 audit(1719881195.276:1195): pid=4699 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.815734] audit: type=1106 audit(1719881195.532:1196): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.826781] audit: type=1104 audit(1719881195.533:1197): pid=4697 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 138.845845] kauditd_printk_skb: 1 callbacks suppressed [ 138.845850] audit: type=1130 audit(1719881200.561:1199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.140:22-139.178.89.65:49534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.023798] audit: type=1101 audit(1719881200.739:1200): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.034799] audit: type=1103 audit(1719881200.750:1201): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.044107] audit: type=1006 audit(1719881200.750:1202): pid=4947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 139.049477] audit: type=1300 audit(1719881200.750:1202): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc9baba0 a2=3 a3=1 items=0 ppid=1 pid=4947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.058802] audit: type=1327 audit(1719881200.750:1202): proctitle=737368643A20636F7265205B707269765D [ 139.081109] audit: type=1105 audit(1719881200.796:1203): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.091515] audit: type=1103 audit(1719881200.807:1204): pid=4949 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.337769] audit: type=1106 audit(1719881201.054:1205): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.349912] audit: type=1104 audit(1719881201.057:1206): pid=4947 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.380016] kauditd_printk_skb: 35 callbacks suppressed [ 145.380021] audit: type=1130 audit(1719881207.097:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.140:22-139.178.89.65:49546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.552063] audit: type=1101 audit(1719881207.267:1231): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.564420] audit: type=1103 audit(1719881207.269:1232): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.576862] audit: type=1006 audit(1719881207.269:1233): pid=4983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 145.586151] audit: type=1300 audit(1719881207.269:1233): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9f3cf40 a2=3 a3=1 items=0 ppid=1 pid=4983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.595954] audit: type=1327 audit(1719881207.269:1233): proctitle=737368643A20636F7265205B707269765D [ 145.607832] audit: type=1105 audit(1719881207.324:1234): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.620767] audit: type=1103 audit(1719881207.337:1235): pid=4986 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.912115] audit: type=1106 audit(1719881207.629:1236): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.923155] audit: type=1104 audit(1719881207.629:1237): pid=4983 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.938127] kauditd_printk_skb: 1 callbacks suppressed [ 150.938132] audit: type=1130 audit(1719881212.655:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.140:22-139.178.89.65:41330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.114714] audit: type=1101 audit(1719881212.831:1240): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.123183] audit: type=1103 audit(1719881212.837:1241): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.131602] audit: type=1006 audit(1719881212.837:1242): pid=5028 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 151.137539] audit: type=1300 audit(1719881212.837:1242): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4e4ac00 a2=3 a3=1 items=0 ppid=1 pid=5028 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.146652] audit: type=1327 audit(1719881212.837:1242): proctitle=737368643A20636F7265205B707269765D [ 151.168162] audit: type=1105 audit(1719881212.884:1243): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.178635] audit: type=1103 audit(1719881212.887:1244): pid=5030 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.426107] audit: type=1106 audit(1719881213.142:1245): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.437908] audit: type=1104 audit(1719881213.142:1246): pid=5028 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.456304] kauditd_printk_skb: 1 callbacks suppressed [ 156.456309] audit: type=1130 audit(1719881218.173:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.140:22-139.178.89.65:48346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.633434] audit: type=1101 audit(1719881218.348:1249): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.642515] audit: type=1103 audit(1719881218.359:1250): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.652235] audit: type=1006 audit(1719881218.359:1251): pid=5043 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 156.660516] audit: type=1300 audit(1719881218.359:1251): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcfaf3c10 a2=3 a3=1 items=0 ppid=1 pid=5043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.670922] audit: type=1327 audit(1719881218.359:1251): proctitle=737368643A20636F7265205B707269765D [ 156.694963] audit: type=1105 audit(1719881218.411:1252): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.706923] audit: type=1103 audit(1719881218.423:1253): pid=5045 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.984039] audit: type=1106 audit(1719881218.698:1254): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.994672] audit: type=1104 audit(1719881218.699:1255): pid=5043 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.008927] kauditd_printk_skb: 1 callbacks suppressed [ 162.008933] audit: type=1130 audit(1719881223.725:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.140:22-139.178.89.65:48362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.181961] audit: type=1101 audit(1719881223.898:1258): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.192496] audit: type=1103 audit(1719881223.909:1259): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.201161] audit: type=1006 audit(1719881223.909:1260): pid=5084 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 162.207261] audit: type=1300 audit(1719881223.909:1260): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff03001e0 a2=3 a3=1 items=0 ppid=1 pid=5084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.217063] audit: type=1327 audit(1719881223.909:1260): proctitle=737368643A20636F7265205B707269765D [ 162.228040] audit: type=1105 audit(1719881223.945:1261): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.238504] audit: type=1103 audit(1719881223.955:1262): pid=5086 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.492457] audit: type=1106 audit(1719881224.209:1263): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.503529] audit: type=1104 audit(1719881224.209:1264): pid=5084 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.088440] kauditd_printk_skb: 43 callbacks suppressed [ 167.088445] audit: type=1106 audit(1719881228.805:1294): pid=5122 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.101221] audit: type=1104 audit(1719881228.805:1295): pid=5122 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.113129] audit: type=1131 audit(1719881228.818:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.140:22-139.178.89.65:51902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.129538] audit: type=1130 audit(1719881228.846:1297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.140:22-139.178.89.65:51904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.309507] audit: type=1101 audit(1719881229.026:1298): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.318870] audit: type=1103 audit(1719881229.029:1299): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.327379] audit: type=1006 audit(1719881229.029:1300): pid=5155 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 167.332853] audit: type=1300 audit(1719881229.029:1300): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c2e4d0 a2=3 a3=1 items=0 ppid=1 pid=5155 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.341911] audit: type=1327 audit(1719881229.029:1300): proctitle=737368643A20636F7265205B707269765D [ 167.361875] audit: type=1105 audit(1719881229.078:1301): pid=5155 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.636136] kauditd_printk_skb: 4 callbacks suppressed [ 172.636140] audit: type=1130 audit(1719881234.352:1306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.140:22-139.178.89.65:51920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.807303] audit: type=1101 audit(1719881234.523:1307): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.818153] audit: type=1103 audit(1719881234.534:1308): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.826453] audit: type=1006 audit(1719881234.539:1309): pid=5174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 172.831860] audit: type=1300 audit(1719881234.539:1309): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd79ecfa0 a2=3 a3=1 items=0 ppid=1 pid=5174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.841684] audit: type=1327 audit(1719881234.539:1309): proctitle=737368643A20636F7265205B707269765D [ 172.858760] audit: type=1105 audit(1719881234.575:1310): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.868903] audit: type=1103 audit(1719881234.578:1311): pid=5176 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.098290] audit: type=1106 audit(1719881234.814:1312): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.108798] audit: type=1104 audit(1719881234.814:1313): pid=5174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.127672] kauditd_printk_skb: 7 callbacks suppressed [ 178.127676] audit: type=1130 audit(1719881239.844:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.140:22-139.178.89.65:55576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.310569] audit: type=1101 audit(1719881240.025:1318): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.321118] audit: type=1103 audit(1719881240.036:1319): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.332144] audit: type=1006 audit(1719881240.036:1320): pid=5201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 178.338037] audit: type=1300 audit(1719881240.036:1320): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa158050 a2=3 a3=1 items=0 ppid=1 pid=5201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.348943] audit: type=1327 audit(1719881240.036:1320): proctitle=737368643A20636F7265205B707269765D [ 178.354972] audit: type=1105 audit(1719881240.065:1321): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.364743] audit: type=1103 audit(1719881240.070:1322): pid=5216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.592252] audit: type=1106 audit(1719881240.308:1323): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.602783] audit: type=1104 audit(1719881240.308:1324): pid=5201 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.621875] kauditd_printk_skb: 1 callbacks suppressed [ 183.621879] audit: type=1130 audit(1719881245.338:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.140:22-139.178.89.65:55582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.804674] audit: type=1101 audit(1719881245.521:1327): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.814084] audit: type=1103 audit(1719881245.521:1328): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.825554] audit: type=1006 audit(1719881245.521:1329): pid=5231 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 183.833326] audit: type=1300 audit(1719881245.521:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8f32f30 a2=3 a3=1 items=0 ppid=1 pid=5231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.844815] audit: type=1327 audit(1719881245.521:1329): proctitle=737368643A20636F7265205B707269765D [ 183.857658] audit: type=1105 audit(1719881245.573:1330): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.871548] audit: type=1103 audit(1719881245.585:1331): pid=5233 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.161439] audit: type=1106 audit(1719881245.876:1332): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.176463] audit: type=1104 audit(1719881245.876:1333): pid=5231 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.617644] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 185.619780] IPv6: ADDRCONF(NETDEV_CHANGE): cali1d60fea1592: link becomes ready This is ip-172-31-27-140 (Linux aarch64 5.15.161-flatcar) 00:47:29 SSH host key: SHA256:NLVBNiMSS06a014QAY9glxzeZvo8L2jpPKtI/eGKl1A (RSA) SSH host key: SHA256:o99G1FmLZ38T94r6iNDeAsnYW0jdDYFQofqZjhuraN4 (ED25519) SSH host key: SHA256:DXp0sh2087+XT3oBv8jvVNEh2XhaxKkuuH2+WA5mzsQ (ECDSA) eth0: 172.31.27.140 fe80::46c:ecff:fe3e:f391 ip-172-31-27-140 login: [ 189.185415] kauditd_printk_skb: 73 callbacks suppressed [ 189.185420] audit: type=1130 audit(1719881250.903:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.140:22-139.178.89.65:47068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.350888] audit: type=1400 audit(1719881251.068:1359): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.368825] audit: type=1300 audit(1719881251.068:1359): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40019983e0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 189.383851] audit: type=1327 audit(1719881251.068:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 189.396845] audit: type=1400 audit(1719881251.082:1360): avc: denied { watch } for pid=2606 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=8268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.409214] audit: type=1300 audit(1719881251.082:1360): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018370e0 a2=fc6 a3=0 items=0 ppid=2419 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c717 key=(null) [ 189.422362] audit: type=1327 audit(1719881251.082:1360): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 189.434099] audit: type=1400 audit(1719881251.097:1362): avc: denied { watch } for pid=2569 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=8264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c675 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.453791] audit: type=1300 audit(1719881251.097:1362): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=400479bf80 a2=fc6 a3=0 items=0 ppid=2420 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c675 key=(null) [ 189.465055] audit: type=1327 audit(1719881251.097:1362): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 194.866862] kauditd_printk_skb: 109 callbacks suppressed [ 194.866867] audit: type=1130 audit(1719881256.585:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.140:22-139.178.89.65:47074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.043380] audit: type=1101 audit(1719881256.761:1403): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.056151] audit: type=1103 audit(1719881256.773:1404): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.079639] audit: type=1006 audit(1719881256.773:1405): pid=5390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 195.084922] audit: type=1300 audit(1719881256.773:1405): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeba945d0 a2=3 a3=1 items=0 ppid=1 pid=5390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.097924] audit: type=1327 audit(1719881256.773:1405): proctitle=737368643A20636F7265205B707269765D [ 195.102209] audit: type=1105 audit(1719881256.816:1406): pid=5390 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.113194] audit: type=1103 audit(1719881256.830:1407): pid=5393 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.471257] audit: type=1106 audit(1719881257.189:1408): pid=5390 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.484330] audit: type=1104 audit(1719881257.189:1409): pid=5390 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.499707] kauditd_printk_skb: 1 callbacks suppressed [ 200.499712] audit: type=1130 audit(1719881262.217:1411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.140:22-139.178.89.65:42764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.678321] audit: type=1101 audit(1719881262.395:1412): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.689524] audit: type=1103 audit(1719881262.398:1413): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.699613] audit: type=1006 audit(1719881262.398:1414): pid=5430 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 200.705552] audit: type=1300 audit(1719881262.398:1414): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf855340 a2=3 a3=1 items=0 ppid=1 pid=5430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.715341] audit: type=1327 audit(1719881262.398:1414): proctitle=737368643A20636F7265205B707269765D [ 200.728666] audit: type=1105 audit(1719881262.444:1415): pid=5430 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.740376] audit: type=1103 audit(1719881262.457:1416): pid=5432 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.999527] audit: type=1106 audit(1719881262.717:1417): pid=5430 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.010032] audit: type=1104 audit(1719881262.717:1418): pid=5430 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.025922] kauditd_printk_skb: 13 callbacks suppressed [ 206.025927] audit: type=1130 audit(1719881267.744:1424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.140:22-139.178.89.65:42766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.197651] audit: type=1101 audit(1719881267.916:1425): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.210048] audit: type=1103 audit(1719881267.927:1426): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.229740] audit: type=1006 audit(1719881267.927:1427): pid=5449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 206.235672] audit: type=1300 audit(1719881267.927:1427): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc63896c0 a2=3 a3=1 items=0 ppid=1 pid=5449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.247133] audit: type=1327 audit(1719881267.927:1427): proctitle=737368643A20636F7265205B707269765D [ 206.260774] audit: type=1105 audit(1719881267.972:1428): pid=5449 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.277274] audit: type=1103 audit(1719881267.974:1429): pid=5451 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.509288] audit: type=1106 audit(1719881268.228:1430): pid=5449 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 206.521524] audit: type=1104 audit(1719881268.229:1431): pid=5449 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 220.792162] kauditd_printk_skb: 1 callbacks suppressed [ 220.792168] audit: type=1334 audit(1719881282.510:1433): prog-id=114 op=UNLOAD [ 220.798076] audit: type=1334 audit(1719881282.516:1434): prog-id=117 op=UNLOAD [ 221.368519] audit: type=1334 audit(1719881283.087:1435): prog-id=77 op=UNLOAD [ 221.370870] audit: type=1334 audit(1719881283.087:1436): prog-id=100 op=UNLOAD [ 221.969169] audit: type=1400 audit(1719881283.688:1437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 221.976690] audit: type=1400 audit(1719881283.694:1438): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 221.986599] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.988485] audit: audit_lost=32 audit_rate_limit=0 audit_backlog_limit=64 [ 221.990967] audit: type=1400 audit(1719881283.694:1439): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 221.997426] audit: backlog limit exceeded [ 225.950053] kauditd_printk_skb: 126 callbacks suppressed [ 225.950058] audit: type=1400 audit(1719881287.670:1472): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.962194] audit: type=1400 audit(1719881287.671:1473): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.969273] audit: type=1400 audit(1719881287.671:1474): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.976877] audit: type=1400 audit(1719881287.671:1475): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.984350] audit: type=1400 audit(1719881287.671:1476): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.991551] audit: type=1400 audit(1719881287.671:1477): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 225.998614] audit: type=1400 audit(1719881287.671:1478): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.005993] audit: type=1400 audit(1719881287.671:1479): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.013167] audit: type=1400 audit(1719881287.671:1480): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 226.019936] audit: type=1400 audit(1719881287.672:1481): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0