:fe53:adbb ip-172-31-26-163 login: [ 29.902110] kauditd_printk_skb: 64 callbacks suppressed [ 29.902114] audit: type=1305 audit(1734099256.469:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 29.908673] audit: type=1300 audit(1734099256.469:155): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe851d2e0 a2=420 a3=0 items=0 ppid=1 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 29.921642] audit: type=1327 audit(1734099256.469:155): proctitle=2F7362696E2F617564697463746C002D44 [ 29.925295] audit: type=1131 audit(1734099256.474:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 29.956763] audit: type=1130 audit(1734099256.522:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 29.964980] audit: type=1106 audit(1734099256.533:158): pid=2126 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 29.973745] audit: type=1104 audit(1734099256.533:159): pid=2126 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 30.000345] audit: type=1106 audit(1734099256.568:160): pid=2122 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 30.014015] audit: type=1104 audit(1734099256.568:161): pid=2122 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 30.024905] audit: type=1131 audit(1734099256.569:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.163:22-139.178.89.65:39112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 31.290652] Initializing XFRM netlink socket This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:14:18 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 43.459056] kauditd_printk_skb: 88 callbacks suppressed [ 43.459061] audit: type=1130 audit(1734099270.099:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.470732] audit: type=1131 audit(1734099270.099:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.831697] audit: type=1130 audit(1734099271.475:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.953772] audit: type=1131 audit(1734099271.597:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 50.378895] audit: type=1131 audit(1734099277.028:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.947667] audit: type=1130 audit(1734099281.599:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.966682] audit: type=1131 audit(1734099281.599:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.343483] audit: type=1130 audit(1734099281.998:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.455500] audit: type=1131 audit(1734099282.110:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 58.331516] audit: type=1130 audit(1734099284.988:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.338726] audit: type=1131 audit(1734099284.988:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.994151] audit: type=1130 audit(1734099285.650:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.008459] audit: type=1131 audit(1734099285.664:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.416100] audit: type=1130 audit(1734099286.073:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.281788] audit: type=1400 audit(1734099287.940:215): avc: denied { mac_admin } for pid=2539 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.290092] audit: type=1401 audit(1734099287.940:215): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 61.295345] audit: type=1300 audit(1734099287.940:215): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000da0060 a1=4000d9e2a0 a2=4000da0030 a3=25 items=0 ppid=1 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.305992] audit: type=1327 audit(1734099287.940:215): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.318847] audit: type=1400 audit(1734099287.940:216): avc: denied { mac_admin } for pid=2539 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.327841] audit: type=1401 audit(1734099287.940:216): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 61.331666] audit: type=1300 audit(1734099287.940:216): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c33e40 a1=4000d9e2b8 a2=4000da00f0 a3=25 items=0 ppid=1 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.344279] audit: type=1327 audit(1734099287.940:216): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.356019] audit: type=1325 audit(1734099287.976:217): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2549 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.361120] audit: type=1300 audit(1734099287.976:217): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff563b9f0 a2=0 a3=1 items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.400980] kauditd_printk_skb: 38 callbacks suppressed [ 70.400984] audit: type=1131 audit(1734099297.063:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.805062] audit: type=1130 audit(1734099297.467:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.073304] audit: type=1400 audit(1734099297.737:232): avc: denied { mac_admin } for pid=2999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.082018] audit: type=1401 audit(1734099297.737:232): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.087154] audit: type=1300 audit(1734099297.737:232): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c66300 a1=40009959e0 a2=4000c662d0 a3=25 items=0 ppid=1 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.099772] audit: type=1327 audit(1734099297.737:232): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 71.112805] audit: type=1400 audit(1734099297.752:233): avc: denied { mac_admin } for pid=2999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.121845] audit: type=1401 audit(1734099297.752:233): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.126975] audit: type=1300 audit(1734099297.752:233): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a41f80 a1=4000995bf0 a2=4000c67050 a3=25 items=0 ppid=1 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.158512] audit: type=1327 audit(1734099297.752:233): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 75.965913] kauditd_printk_skb: 4 callbacks suppressed [ 75.965917] audit: type=1106 audit(1734099302.630:235): pid=2159 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.976178] audit: type=1104 audit(1734099302.630:236): pid=2159 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.991887] audit: type=1106 audit(1734099302.655:237): pid=2155 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.003132] audit: type=1104 audit(1734099302.655:238): pid=2155 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.014316] audit: type=1131 audit(1734099302.677:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.163:22-139.178.89.65:39118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.874014] audit: type=1325 audit(1734099311.541:240): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.880309] audit: type=1300 audit(1734099311.541:240): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5d92580 a2=0 a3=1 items=0 ppid=3178 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.895702] audit: type=1327 audit(1734099311.541:240): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 84.903326] audit: type=1325 audit(1734099311.542:241): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.909470] audit: type=1300 audit(1734099311.542:241): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffb98c80 a2=0 a3=1 items=0 ppid=3178 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.920247] audit: type=1327 audit(1734099311.542:241): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 84.925718] audit: type=1325 audit(1734099311.542:242): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.931302] audit: type=1300 audit(1734099311.542:242): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe795d270 a2=0 a3=1 items=0 ppid=3178 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.942349] audit: type=1327 audit(1734099311.542:242): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 84.948260] audit: type=1325 audit(1734099311.563:243): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 92.695775] kauditd_printk_skb: 143 callbacks suppressed [ 92.695779] audit: type=1325 audit(1734099319.364:291): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.703633] audit: type=1300 audit(1734099319.364:291): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffcc0c9e70 a2=0 a3=1 items=0 ppid=3178 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.716436] audit: type=1327 audit(1734099319.364:291): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.722218] audit: type=1325 audit(1734099319.384:292): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.727915] audit: type=1300 audit(1734099319.384:292): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcc0c9e70 a2=0 a3=1 items=0 ppid=3178 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.738518] audit: type=1327 audit(1734099319.384:292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.758146] audit: type=1325 audit(1734099319.426:293): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.764648] audit: type=1300 audit(1734099319.426:293): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc741ffe0 a2=0 a3=1 items=0 ppid=3178 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.775759] audit: type=1327 audit(1734099319.426:293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.787012] audit: type=1325 audit(1734099319.454:294): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.396193] kauditd_printk_skb: 8 callbacks suppressed [ 102.396198] audit: type=1325 audit(1734099329.067:297): table=filter:95 family=2 entries=17 op=nft_register_rule pid=3693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.403851] audit: type=1300 audit(1734099329.067:297): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff902f3d0 a2=0 a3=1 items=0 ppid=3178 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.415604] audit: type=1327 audit(1734099329.067:297): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 102.422909] audit: type=1325 audit(1734099329.093:298): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.428406] audit: type=1300 audit(1734099329.093:298): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff902f3d0 a2=0 a3=1 items=0 ppid=3178 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.439572] audit: type=1327 audit(1734099329.093:298): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.165656] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 116.168334] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 117.731852] audit: type=1400 audit(1734099344.404:299): avc: denied { write } for pid=4168 comm="tee" name="fd" dev="proc" ino=21760 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 117.741853] audit: type=1300 audit(1734099344.404:299): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee6bea0d a2=241 a3=1b6 items=1 ppid=4147 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.759217] audit: type=1307 audit(1734099344.404:299): cwd="/etc/service/enabled/node-status-reporter/log" [ 117.765281] audit: type=1302 audit(1734099344.404:299): item=0 name="/dev/fd/63" inode=21742 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 117.783231] audit: type=1327 audit(1734099344.404:299): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 117.790156] audit: type=1400 audit(1734099344.431:300): avc: denied { write } for pid=4190 comm="tee" name="fd" dev="proc" ino=20925 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 117.798383] audit: type=1300 audit(1734099344.431:300): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff9f56a1e a2=241 a3=1b6 items=1 ppid=4151 pid=4190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.813482] audit: type=1307 audit(1734099344.431:300): cwd="/etc/service/enabled/cni/log" [ 117.819637] audit: type=1302 audit(1734099344.431:300): item=0 name="/dev/fd/63" inode=20922 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 117.840024] audit: type=1327 audit(1734099344.431:300): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 119.095702] IPv6: ADDRCONF(NETDEV_CHANGE): cali008f78e0953: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:46 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 120.030673] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 120.033072] IPv6: ADDRCONF(NETDEV_CHANGE): cali26f07bd83c5: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:47 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 121.232961] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.235366] IPv6: ADDRCONF(NETDEV_CHANGE): cali34aa87130ca: link becomes ready [ 121.544835] IPv6: ADDRCONF(NETDEV_CHANGE): cali46c5baa8baa: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:48 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 122.768204] kauditd_printk_skb: 544 callbacks suppressed [ 122.768208] audit: type=1101 audit(1734099349.440:412): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.791441] audit: type=1103 audit(1734099349.455:413): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.803319] audit: type=1006 audit(1734099349.455:414): pid=4865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 122.811036] audit: type=1300 audit(1734099349.455:414): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2f02580 a2=3 a3=1 items=0 ppid=1 pid=4865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.823163] audit: type=1327 audit(1734099349.455:414): proctitle=737368643A20636F7265205B707269765D [ 122.848244] audit: type=1105 audit(1734099349.518:415): pid=4865 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.862881] audit: type=1103 audit(1734099349.532:416): pid=4887 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:49 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 123.110445] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.112908] IPv6: ADDRCONF(NETDEV_CHANGE): calidc4bcdcf13f: link becomes ready [ 123.184214] audit: type=1325 audit(1734099349.856:417): table=filter:111 family=2 entries=46 op=nft_register_chain pid=4907 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 123.190451] audit: type=1300 audit(1734099349.856:417): arch=c00000b7 syscall=211 success=yes exit=23892 a0=3 a1=ffffcfcfb180 a2=0 a3=ffffbe6a4fa8 items=0 ppid=4142 pid=4907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.209492] audit: type=1327 audit(1734099349.856:417): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:50 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 124.201219] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.203879] IPv6: ADDRCONF(NETDEV_CHANGE): calib6b943e0f60: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:51 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:52 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:53 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 43.459056] kauditd_printk_skb: 88 callbacks suppressed [ 43.459061] audit: type=1130 audit(1734099270.099:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.470732] audit: type=1131 audit(1734099270.099:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.831697] audit: type=1130 audit(1734099271.475:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.953772] audit: type=1131 audit(1734099271.597:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 50.378895] audit: type=1131 audit(1734099277.028:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.947667] audit: type=1130 audit(1734099281.599:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.966682] audit: type=1131 audit(1734099281.599:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.343483] audit: type=1130 audit(1734099281.998:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.455500] audit: type=1131 audit(1734099282.110:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 58.331516] audit: type=1130 audit(1734099284.988:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.338726] audit: type=1131 audit(1734099284.988:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.994151] audit: type=1130 audit(1734099285.650:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.008459] audit: type=1131 audit(1734099285.664:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.416100] audit: type=1130 audit(1734099286.073:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.281788] audit: type=1400 audit(1734099287.940:215): avc: denied { mac_admin } for pid=2539 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.290092] audit: type=1401 audit(1734099287.940:215): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 61.295345] audit: type=1300 audit(1734099287.940:215): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000da0060 a1=4000d9e2a0 a2=4000da0030 a3=25 items=0 ppid=1 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.305992] audit: type=1327 audit(1734099287.940:215): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.318847] audit: type=1400 audit(1734099287.940:216): avc: denied { mac_admin } for pid=2539 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.327841] audit: type=1401 audit(1734099287.940:216): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 61.331666] audit: type=1300 audit(1734099287.940:216): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c33e40 a1=4000d9e2b8 a2=4000da00f0 a3=25 items=0 ppid=1 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.344279] audit: type=1327 audit(1734099287.940:216): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.356019] audit: type=1325 audit(1734099287.976:217): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2549 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.361120] audit: type=1300 audit(1734099287.976:217): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff563b9f0 a2=0 a3=1 items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.400980] kauditd_printk_skb: 38 callbacks suppressed [ 70.400984] audit: type=1131 audit(1734099297.063:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.805062] audit: type=1130 audit(1734099297.467:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.073304] audit: type=1400 audit(1734099297.737:232): avc: denied { mac_admin } for pid=2999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.082018] audit: type=1401 audit(1734099297.737:232): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.087154] audit: type=1300 audit(1734099297.737:232): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c66300 a1=40009959e0 a2=4000c662d0 a3=25 items=0 ppid=1 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.099772] audit: type=1327 audit(1734099297.737:232): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 71.112805] audit: type=1400 audit(1734099297.752:233): avc: denied { mac_admin } for pid=2999 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.121845] audit: type=1401 audit(1734099297.752:233): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.126975] audit: type=1300 audit(1734099297.752:233): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a41f80 a1=4000995bf0 a2=4000c67050 a3=25 items=0 ppid=1 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.158512] audit: type=1327 audit(1734099297.752:233): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 75.965913] kauditd_printk_skb: 4 callbacks suppressed [ 75.965917] audit: type=1106 audit(1734099302.630:235): pid=2159 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.976178] audit: type=1104 audit(1734099302.630:236): pid=2159 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.991887] audit: type=1106 audit(1734099302.655:237): pid=2155 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.003132] audit: type=1104 audit(1734099302.655:238): pid=2155 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.014316] audit: type=1131 audit(1734099302.677:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.163:22-139.178.89.65:39118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 84.874014] audit: type=1325 audit(1734099311.541:240): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.880309] audit: type=1300 audit(1734099311.541:240): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5d92580 a2=0 a3=1 items=0 ppid=3178 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.895702] audit: type=1327 audit(1734099311.541:240): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 84.903326] audit: type=1325 audit(1734099311.542:241): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3221 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.909470] audit: type=1300 audit(1734099311.542:241): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffb98c80 a2=0 a3=1 items=0 ppid=3178 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.920247] audit: type=1327 audit(1734099311.542:241): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 84.925718] audit: type=1325 audit(1734099311.542:242): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 84.931302] audit: type=1300 audit(1734099311.542:242): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe795d270 a2=0 a3=1 items=0 ppid=3178 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.942349] audit: type=1327 audit(1734099311.542:242): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 84.948260] audit: type=1325 audit(1734099311.563:243): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 92.695775] kauditd_printk_skb: 143 callbacks suppressed [ 92.695779] audit: type=1325 audit(1734099319.364:291): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.703633] audit: type=1300 audit(1734099319.364:291): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffcc0c9e70 a2=0 a3=1 items=0 ppid=3178 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.716436] audit: type=1327 audit(1734099319.364:291): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.722218] audit: type=1325 audit(1734099319.384:292): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.727915] audit: type=1300 audit(1734099319.384:292): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcc0c9e70 a2=0 a3=1 items=0 ppid=3178 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.738518] audit: type=1327 audit(1734099319.384:292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.758146] audit: type=1325 audit(1734099319.426:293): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 92.764648] audit: type=1300 audit(1734099319.426:293): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc741ffe0 a2=0 a3=1 items=0 ppid=3178 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.775759] audit: type=1327 audit(1734099319.426:293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 92.787012] audit: type=1325 audit(1734099319.454:294): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.396193] kauditd_printk_skb: 8 callbacks suppressed [ 102.396198] audit: type=1325 audit(1734099329.067:297): table=filter:95 family=2 entries=17 op=nft_register_rule pid=3693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.403851] audit: type=1300 audit(1734099329.067:297): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff902f3d0 a2=0 a3=1 items=0 ppid=3178 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.415604] audit: type=1327 audit(1734099329.067:297): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 102.422909] audit: type=1325 audit(1734099329.093:298): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3693 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.428406] audit: type=1300 audit(1734099329.093:298): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff902f3d0 a2=0 a3=1 items=0 ppid=3178 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.439572] audit: type=1327 audit(1734099329.093:298): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.165656] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 116.168334] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 117.731852] audit: type=1400 audit(1734099344.404:299): avc: denied { write } for pid=4168 comm="tee" name="fd" dev="proc" ino=21760 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 117.741853] audit: type=1300 audit(1734099344.404:299): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee6bea0d a2=241 a3=1b6 items=1 ppid=4147 pid=4168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.759217] audit: type=1307 audit(1734099344.404:299): cwd="/etc/service/enabled/node-status-reporter/log" [ 117.765281] audit: type=1302 audit(1734099344.404:299): item=0 name="/dev/fd/63" inode=21742 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 117.783231] audit: type=1327 audit(1734099344.404:299): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 117.790156] audit: type=1400 audit(1734099344.431:300): avc: denied { write } for pid=4190 comm="tee" name="fd" dev="proc" ino=20925 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 117.798383] audit: type=1300 audit(1734099344.431:300): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff9f56a1e a2=241 a3=1b6 items=1 ppid=4151 pid=4190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.813482] audit: type=1307 audit(1734099344.431:300): cwd="/etc/service/enabled/cni/log" [ 117.819637] audit: type=1302 audit(1734099344.431:300): item=0 name="/dev/fd/63" inode=20922 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 117.840024] audit: type=1327 audit(1734099344.431:300): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 119.095702] IPv6: ADDRCONF(NETDEV_CHANGE): cali008f78e0953: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:46 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 120.030673] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 120.033072] IPv6: ADDRCONF(NETDEV_CHANGE): cali26f07bd83c5: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:47 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 121.232961] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.235366] IPv6: ADDRCONF(NETDEV_CHANGE): cali34aa87130ca: link becomes ready [ 121.544835] IPv6: ADDRCONF(NETDEV_CHANGE): cali46c5baa8baa: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:48 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 122.768204] kauditd_printk_skb: 544 callbacks suppressed [ 122.768208] audit: type=1101 audit(1734099349.440:412): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.791441] audit: type=1103 audit(1734099349.455:413): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.803319] audit: type=1006 audit(1734099349.455:414): pid=4865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 122.811036] audit: type=1300 audit(1734099349.455:414): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2f02580 a2=3 a3=1 items=0 ppid=1 pid=4865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.823163] audit: type=1327 audit(1734099349.455:414): proctitle=737368643A20636F7265205B707269765D [ 122.848244] audit: type=1105 audit(1734099349.518:415): pid=4865 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.862881] audit: type=1103 audit(1734099349.532:416): pid=4887 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:49 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 123.110445] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.112908] IPv6: ADDRCONF(NETDEV_CHANGE): calidc4bcdcf13f: link becomes ready [ 123.184214] audit: type=1325 audit(1734099349.856:417): table=filter:111 family=2 entries=46 op=nft_register_chain pid=4907 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 123.190451] audit: type=1300 audit(1734099349.856:417): arch=c00000b7 syscall=211 success=yes exit=23892 a0=3 a1=ffffcfcfb180 a2=0 a3=ffffbe6a4fa8 items=0 ppid=4142 pid=4907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.209492] audit: type=1327 audit(1734099349.856:417): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:50 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 124.201219] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 124.203879] IPv6: ADDRCONF(NETDEV_CHANGE): calib6b943e0f60: link becomes ready This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:51 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:52 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: This is ip-172-31-26-163 (Linux aarch64 5.15.173-flatcar) 14:15:53 SSH host key: SHA256:oZAKg1BadOOWMxVM+Jrj+k+xSxWG+LpT2oppCr1aeI4 (RSA) SSH host key: SHA256:rtAqceDkPzycWfKN7wjZ5qoM0xPiv47fucxY/YZN2Y4 (ECDSA) SSH host key: SHA256:8PrsBHr+FHYX+plKmXXbhtSvKZDvkGRT3LHg7vlE6Lw (ED25519) eth0: 172.31.26.163 fe80::42b:c7ff:fe53:adbb ip-172-31-26-163 login: [ 128.368593] kauditd_printk_skb: 18 callbacks suppressed [ 128.368599] audit: type=1130 audit(1734099355.039:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.163:22-139.178.89.65:43164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 128.593310] audit: type=1101 audit(1734099355.265:427): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.613570] audit: type=1103 audit(1734099355.277:428): pid=5200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.649483] audit: type=1006 audit(1734099355.277:429): pid=5200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 128.657040] audit: type=1300 audit(1734099355.277:429): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb67f2f0 a2=3 a3=1 items=0 ppid=1 pid=5200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.666545] audit: type=1327 audit(1734099355.277:429): proctitle=737368643A20636F7265205B707269765D [ 128.670336] audit: type=1105 audit(1734099355.306:430): pid=5200 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.683294] audit: type=1103 audit(1734099355.314:431): pid=5203 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.706216] audit: type=1325 audit(1734099355.377:432): table=filter:117 family=2 entries=10 op=nft_register_rule pid=5205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.711965] audit: type=1300 audit(1734099355.377:432): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=fffff80867a0 a2=0 a3=1 items=0 ppid=3178 pid=5205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.015865] kauditd_printk_skb: 7 callbacks suppressed [ 134.015869] audit: type=1130 audit(1734099360.686:437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.163:22-139.178.89.65:49818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.203562] audit: type=1101 audit(1734099360.874:438): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.215034] audit: type=1103 audit(1734099360.879:439): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.225086] audit: type=1006 audit(1734099360.879:440): pid=5599 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 134.231231] audit: type=1300 audit(1734099360.879:440): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc44930a0 a2=3 a3=1 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.243500] audit: type=1327 audit(1734099360.879:440): proctitle=737368643A20636F7265205B707269765D [ 134.248724] audit: type=1105 audit(1734099360.913:441): pid=5599 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.260523] audit: type=1103 audit(1734099360.931:442): pid=5602 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.523109] audit: type=1106 audit(1734099361.193:443): pid=5599 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.534441] audit: type=1104 audit(1734099361.197:444): pid=5599 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.612397] kauditd_printk_skb: 23 callbacks suppressed [ 140.612402] audit: type=1130 audit(1734099367.283:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.163:22-139.178.89.65:49838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 140.785651] audit: type=1101 audit(1734099367.456:465): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.797390] audit: type=1103 audit(1734099367.468:466): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.806429] audit: type=1006 audit(1734099367.468:467): pid=5664 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 140.812314] audit: type=1300 audit(1734099367.468:467): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd273c780 a2=3 a3=1 items=0 ppid=1 pid=5664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.822780] audit: type=1327 audit(1734099367.468:467): proctitle=737368643A20636F7265205B707269765D [ 140.844947] audit: type=1105 audit(1734099367.515:468): pid=5664 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.857541] audit: type=1103 audit(1734099367.527:469): pid=5667 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.102996] audit: type=1106 audit(1734099367.773:470): pid=5664 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.113850] audit: type=1104 audit(1734099367.775:471): pid=5664 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.127452] kauditd_printk_skb: 1 callbacks suppressed [ 146.127456] audit: type=1130 audit(1734099372.798:473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.163:22-139.178.89.65:39386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 146.300363] audit: type=1101 audit(1734099372.971:474): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.311695] audit: type=1103 audit(1734099372.982:475): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.323170] audit: type=1006 audit(1734099372.982:476): pid=5684 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 146.331403] audit: type=1300 audit(1734099372.982:476): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1ab9d20 a2=3 a3=1 items=0 ppid=1 pid=5684 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.344095] audit: type=1327 audit(1734099372.982:476): proctitle=737368643A20636F7265205B707269765D [ 146.358844] audit: type=1105 audit(1734099373.029:477): pid=5684 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.380665] audit: type=1103 audit(1734099373.042:478): pid=5687 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.610782] audit: type=1106 audit(1734099373.281:479): pid=5684 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.624072] audit: type=1104 audit(1734099373.281:480): pid=5684 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.634574] kauditd_printk_skb: 7 callbacks suppressed [ 151.634579] audit: type=1130 audit(1734099378.305:484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.163:22-139.178.89.65:41766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.806288] audit: type=1101 audit(1734099378.477:485): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.818126] audit: type=1103 audit(1734099378.488:486): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.828072] audit: type=1006 audit(1734099378.491:487): pid=5722 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 151.833973] audit: type=1300 audit(1734099378.491:487): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeab92050 a2=3 a3=1 items=0 ppid=1 pid=5722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.844442] audit: type=1327 audit(1734099378.491:487): proctitle=737368643A20636F7265205B707269765D [ 151.874653] audit: type=1105 audit(1734099378.544:488): pid=5722 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.889605] audit: type=1103 audit(1734099378.556:489): pid=5725 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.125941] audit: type=1106 audit(1734099378.796:490): pid=5722 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.141976] audit: type=1104 audit(1734099378.796:491): pid=5722 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.150645] kauditd_printk_skb: 1 callbacks suppressed [ 157.150650] audit: type=1130 audit(1734099383.820:493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.163:22-139.178.89.65:41772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.320158] audit: type=1101 audit(1734099383.990:494): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.329493] audit: type=1103 audit(1734099383.991:495): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.339761] audit: type=1006 audit(1734099383.991:496): pid=5736 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 157.345676] audit: type=1300 audit(1734099383.991:496): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe187d470 a2=3 a3=1 items=0 ppid=1 pid=5736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.355436] audit: type=1327 audit(1734099383.991:496): proctitle=737368643A20636F7265205B707269765D [ 157.377025] audit: type=1105 audit(1734099384.047:497): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.388948] audit: type=1103 audit(1734099384.059:498): pid=5739 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.631338] audit: type=1106 audit(1734099384.301:499): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.642738] audit: type=1104 audit(1734099384.301:500): pid=5736 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.661927] kauditd_printk_skb: 43 callbacks suppressed [ 162.661932] audit: type=1106 audit(1734099389.334:530): pid=5783 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.679515] audit: type=1104 audit(1734099389.334:531): pid=5783 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.696061] audit: type=1131 audit(1734099389.337:532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.26.163:22-139.178.89.65:46884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.704593] audit: type=1130 audit(1734099389.358:533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.163:22-139.178.89.65:46898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.866486] audit: type=1101 audit(1734099389.538:534): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.876382] audit: type=1103 audit(1734099389.538:535): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.887006] audit: type=1006 audit(1734099389.538:536): pid=5794 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 162.894077] audit: type=1300 audit(1734099389.538:536): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc327c20 a2=3 a3=1 items=0 ppid=1 pid=5794 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.903973] audit: type=1327 audit(1734099389.538:536): proctitle=737368643A20636F7265205B707269765D [ 162.928211] audit: type=1105 audit(1734099389.599:537): pid=5794 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.203871] kauditd_printk_skb: 10 callbacks suppressed [ 168.203876] audit: type=1130 audit(1734099394.876:544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.163:22-139.178.89.65:46906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.370545] audit: type=1101 audit(1734099395.042:545): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.382201] audit: type=1103 audit(1734099395.054:546): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.391355] audit: type=1006 audit(1734099395.054:547): pid=5830 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 168.397477] audit: type=1300 audit(1734099395.054:547): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc94fd9a0 a2=3 a3=1 items=0 ppid=1 pid=5830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.407830] audit: type=1327 audit(1734099395.054:547): proctitle=737368643A20636F7265205B707269765D [ 168.429363] audit: type=1105 audit(1734099395.101:548): pid=5830 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.440858] audit: type=1103 audit(1734099395.113:549): pid=5833 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.680408] audit: type=1106 audit(1734099395.352:550): pid=5830 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.692528] audit: type=1104 audit(1734099395.353:551): pid=5830 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.707590] kauditd_printk_skb: 7 callbacks suppressed [ 173.707594] audit: type=1130 audit(1734099400.380:555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.163:22-139.178.89.65:54780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.879737] audit: type=1101 audit(1734099400.552:556): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.891419] audit: type=1103 audit(1734099400.563:557): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.900429] audit: type=1006 audit(1734099400.564:558): pid=5847 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 173.906551] audit: type=1300 audit(1734099400.564:558): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc3e3c90 a2=3 a3=1 items=0 ppid=1 pid=5847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.916320] audit: type=1327 audit(1734099400.564:558): proctitle=737368643A20636F7265205B707269765D [ 173.938061] audit: type=1105 audit(1734099400.610:559): pid=5847 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.949924] audit: type=1103 audit(1734099400.613:560): pid=5850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.232691] audit: type=1106 audit(1734099400.903:561): pid=5847 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.244784] audit: type=1104 audit(1734099400.903:562): pid=5847 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.257238] kauditd_printk_skb: 1 callbacks suppressed [ 179.257243] audit: type=1130 audit(1734099405.929:564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.163:22-139.178.89.65:54794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.437025] audit: type=1101 audit(1734099406.108:565): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.452025] audit: type=1103 audit(1734099406.115:566): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.486942] audit: type=1006 audit(1734099406.115:567): pid=5880 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 179.501271] audit: type=1300 audit(1734099406.115:567): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff086dea0 a2=3 a3=1 items=0 ppid=1 pid=5880 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.510917] audit: type=1327 audit(1734099406.115:567): proctitle=737368643A20636F7265205B707269765D [ 179.514200] audit: type=1105 audit(1734099406.157:568): pid=5880 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.525329] audit: type=1103 audit(1734099406.165:569): pid=5889 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.822619] audit: type=1106 audit(1734099406.492:570): pid=5880 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.834326] audit: type=1104 audit(1734099406.492:571): pid=5880 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.844296] kauditd_printk_skb: 1 callbacks suppressed [ 184.844301] audit: type=1130 audit(1734099411.517:573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.163:22-139.178.89.65:56202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.011122] audit: type=1101 audit(1734099411.684:574): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.023451] audit: type=1103 audit(1734099411.686:575): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.034367] audit: type=1006 audit(1734099411.686:576): pid=5913 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 185.042423] audit: type=1300 audit(1734099411.686:576): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5968d30 a2=3 a3=1 items=0 ppid=1 pid=5913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.052648] audit: type=1327 audit(1734099411.686:576): proctitle=737368643A20636F7265205B707269765D [ 185.071063] audit: type=1105 audit(1734099411.744:577): pid=5913 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.083240] audit: type=1103 audit(1734099411.756:578): pid=5916 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.344977] audit: type=1106 audit(1734099412.018:579): pid=5913 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.355641] audit: type=1104 audit(1734099412.018:580): pid=5913 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.367763] kauditd_printk_skb: 1 callbacks suppressed [ 190.367768] audit: type=1130 audit(1734099417.041:582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.163:22-139.178.89.65:56208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.542041] audit: type=1101 audit(1734099417.215:583): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.553360] audit: type=1103 audit(1734099417.226:584): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.562484] audit: type=1006 audit(1734099417.227:585): pid=5925 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 190.572310] audit: type=1300 audit(1734099417.227:585): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff695ad50 a2=3 a3=1 items=0 ppid=1 pid=5925 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.583260] audit: type=1327 audit(1734099417.227:585): proctitle=737368643A20636F7265205B707269765D [ 190.588426] audit: type=1105 audit(1734099417.259:586): pid=5925 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.599871] audit: type=1103 audit(1734099417.273:587): pid=5928 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.835904] audit: type=1106 audit(1734099417.509:588): pid=5925 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.848958] audit: type=1104 audit(1734099417.509:589): pid=5925 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 195.862283] kauditd_printk_skb: 1 callbacks suppressed [ 195.862287] audit: type=1130 audit(1734099422.535:591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.163:22-139.178.89.65:60134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.039440] audit: type=1101 audit(1734099422.712:592): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.050897] audit: type=1103 audit(1734099422.723:593): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.060697] audit: type=1006 audit(1734099422.724:594): pid=5940 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 196.066526] audit: type=1300 audit(1734099422.724:594): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3e04d40 a2=3 a3=1 items=0 ppid=1 pid=5940 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.076405] audit: type=1327 audit(1734099422.724:594): proctitle=737368643A20636F7265205B707269765D [ 196.096541] audit: type=1105 audit(1734099422.769:595): pid=5940 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.107616] audit: type=1103 audit(1734099422.780:596): pid=5943 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.399478] audit: type=1106 audit(1734099423.072:597): pid=5940 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.410230] audit: type=1104 audit(1734099423.075:598): pid=5940 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.422837] kauditd_printk_skb: 1 callbacks suppressed [ 201.422841] audit: type=1130 audit(1734099428.097:600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.163:22-139.178.89.65:34328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.601445] audit: type=1101 audit(1734099428.275:601): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.614006] audit: type=1103 audit(1734099428.288:602): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.624491] audit: type=1006 audit(1734099428.288:603): pid=5978 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 201.630528] audit: type=1300 audit(1734099428.288:603): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0ac2010 a2=3 a3=1 items=0 ppid=1 pid=5978 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.645652] audit: type=1327 audit(1734099428.288:603): proctitle=737368643A20636F7265205B707269765D [ 201.659129] audit: type=1105 audit(1734099428.333:604): pid=5978 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.669807] audit: type=1103 audit(1734099428.337:605): pid=5982 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.901352] audit: type=1106 audit(1734099428.575:606): pid=5978 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 201.914326] audit: type=1104 audit(1734099428.577:607): pid=5978 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'