key=(null) [ 49.719127] audit: type=1327 audit(1747442420.405:583): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E313538002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 49.728282] audit: type=1400 audit(1747442420.416:584): avc: denied { watch } for pid=2500 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c21,c177 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.578491] kauditd_printk_skb: 266 callbacks suppressed [ 56.578494] audit: type=1400 audit(1747442427.325:836): avc: denied { watch } for pid=2468 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 [ 56.587254] audit: type=1300 audit(1747442427.325:836): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e7a540 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 56.596554] audit: type=1327 audit(1747442427.325:836): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.918924] audit: type=1400 audit(1747442427.665:837): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.925531] audit: type=1300 audit(1747442427.665:837): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000079720 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 56.933791] audit: type=1327 audit(1747442427.665:837): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.941689] audit: type=1400 audit(1747442427.665:838): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.947988] audit: type=1300 audit(1747442427.665:838): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0000799c0 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 56.956125] audit: type=1327 audit(1747442427.665:838): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.963519] audit: type=1400 audit(1747442427.665:839): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 62.259769] kauditd_printk_skb: 315 callbacks suppressed [ 62.259772] audit: type=1400 audit(1747442433.006:934): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.268089] audit: type=1400 audit(1747442433.006:935): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.274468] audit: type=1400 audit(1747442433.006:936): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.280304] audit: type=1400 audit(1747442433.006:937): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.286792] audit: type=1400 audit(1747442433.006:938): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.292603] audit: type=1400 audit(1747442433.006:939): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.298958] audit: type=1400 audit(1747442433.006:940): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.305544] audit: type=1400 audit(1747442433.006:941): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.312716] audit: type=1400 audit(1747442433.006:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 62.318539] audit: type=1400 audit(1747442433.021:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 69.451765] kauditd_printk_skb: 47 callbacks suppressed [ 69.451768] audit: type=1106 audit(1747442440.198:952): pid=2010 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 69.463183] audit: type=1104 audit(1747442440.198:953): pid=2010 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 69.491036] audit: type=1106 audit(1747442440.237:954): pid=2007 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 69.506178] audit: type=1104 audit(1747442440.238:955): pid=2007 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 69.520175] audit: type=1131 audit(1747442440.245:956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.25.158:22-139.178.68.195:52900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.364755] audit: type=1325 audit(1747442441.111:957): table=filter:89 family=2 entries=14 op=nft_register_rule pid=3259 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 70.369569] audit: type=1300 audit(1747442441.111:957): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe4bd7cd10 a2=0 a3=7ffe4bd7ccfc items=0 ppid=2715 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.387925] audit: type=1327 audit(1747442441.111:957): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 70.393352] audit: type=1325 audit(1747442441.130:958): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3259 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 70.400672] audit: type=1300 audit(1747442441.130:958): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe4bd7cd10 a2=0 a3=0 items=0 ppid=2715 pid=3259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 76.985379] kauditd_printk_skb: 139 callbacks suppressed [ 76.985382] audit: type=1400 audit(1747442447.731:1003): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.994575] audit: type=1400 audit(1747442447.731:1004): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.000796] audit: type=1400 audit(1747442447.731:1005): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.007640] audit: type=1400 audit(1747442447.731:1006): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.015365] audit: type=1400 audit(1747442447.731:1007): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.023779] audit: type=1400 audit(1747442447.731:1008): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.030757] audit: type=1400 audit(1747442447.731:1009): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.037584] audit: type=1400 audit(1747442447.731:1010): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.044577] audit: type=1400 audit(1747442447.731:1011): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 77.051757] audit: type=1400 audit(1747442447.732:1012): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.470958] kauditd_printk_skb: 91 callbacks suppressed [ 83.470961] audit: type=1400 audit(1747442454.217:1028): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.479677] audit: type=1300 audit(1747442454.217:1028): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f9486626ef8 items=0 ppid=3350 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.488344] audit: type=1327 audit(1747442454.217:1028): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163313036386531636139343134646339373766306337623833616232 [ 83.503879] audit: type=1400 audit(1747442454.217:1029): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.510502] audit: type=1400 audit(1747442454.217:1029): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.517535] audit: type=1400 audit(1747442454.217:1029): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.524457] audit: type=1400 audit(1747442454.217:1029): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.530843] audit: type=1400 audit(1747442454.217:1029): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.537242] audit: type=1400 audit(1747442454.217:1029): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.544101] audit: type=1400 audit(1747442454.217:1029): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.666289] kauditd_printk_skb: 34 callbacks suppressed [ 88.666292] audit: type=1325 audit(1747442459.412:1035): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.681468] audit: type=1300 audit(1747442459.412:1035): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc07957430 a2=0 a3=7ffc0795741c items=0 ppid=2715 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.693160] audit: type=1327 audit(1747442459.412:1035): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.698338] audit: type=1325 audit(1747442459.422:1036): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3976 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.704262] audit: type=1300 audit(1747442459.422:1036): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc07957430 a2=0 a3=7ffc0795741c items=0 ppid=2715 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.714803] audit: type=1327 audit(1747442459.422:1036): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 95.321170] audit: type=1400 audit(1747442466.068:1037): avc: denied { perfmon } for pid=3992 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.329517] audit: type=1300 audit(1747442466.068:1037): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3ccc19eb58 items=0 ppid=3350 pid=3992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.339217] audit: type=1327 audit(1747442466.068:1037): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465656433646534356533346438383231343438396431303036626236 [ 95.347874] audit: type=1400 audit(1747442466.068:1038): avc: denied { bpf } for pid=3992 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.353410] audit: type=1400 audit(1747442466.068:1038): avc: denied { bpf } for pid=3992 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.358772] audit: type=1400 audit(1747442466.068:1038): avc: denied { bpf } for pid=3992 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.364639] audit: type=1400 audit(1747442466.068:1038): avc: denied { perfmon } for pid=3992 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.370530] audit: type=1400 audit(1747442466.068:1038): avc: denied { perfmon } for pid=3992 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.376602] audit: type=1400 audit(1747442466.068:1038): avc: denied { perfmon } for pid=3992 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.384056] audit: type=1400 audit(1747442466.068:1038): avc: denied { perfmon } for pid=3992 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.013596] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 96.015530] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 98.612249] IPv6: ADDRCONF(NETDEV_CHANGE): cali0e9ba9848c5: link becomes ready This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:09 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 99.319667] IPv6: ADDRCONF(NETDEV_CHANGE): calif378826d3f6: link becomes ready [ 99.735487] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 99.736508] IPv6: ADDRCONF(NETDEV_CHANGE): cali8c938fbd1a4: link becomes ready [ 99.931936] IPv6: ADDRCONF(NETDEV_CHANGE): cali31c15d4cea7: link becomes ready This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:11 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 100.505669] kauditd_printk_skb: 795 callbacks suppressed [ 100.505672] audit: type=1101 audit(1747442471.252:1224): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 100.511984] audit: type=1103 audit(1747442471.258:1225): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 100.516714] audit: type=1006 audit(1747442471.258:1226): pid=4650 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 100.523504] audit: type=1300 audit(1747442471.258:1226): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6cd5dd20 a2=3 a3=0 items=0 ppid=1 pid=4650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.529459] audit: type=1327 audit(1747442471.258:1226): proctitle=737368643A20636F7265205B707269765D [ 100.544350] audit: type=1105 audit(1747442471.291:1227): pid=4650 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 100.549238] audit: type=1103 audit(1747442471.293:1228): pid=4666 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 100.558902] audit: type=1325 audit(1747442471.302:1229): table=filter:111 family=2 entries=20 op=nft_register_rule pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 100.562631] audit: type=1300 audit(1747442471.302:1229): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffead2878a0 a2=0 a3=7ffead28788c items=0 ppid=2715 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.571140] audit: type=1327 audit(1747442471.302:1229): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:12 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 101.890199] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 101.891789] IPv6: ADDRCONF(NETDEV_CHANGE): calia0f423c65bf: link becomes ready [ 102.000315] IPv6: ADDRCONF(NETDEV_CHANGE): calia80c6a3ef48: link becomes ready This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:13 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 102.861405] IPv6: ADDRCONF(NETDEV_CHANGE): cali06ff4f894e4: link becomes ready This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:14 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 103.679231] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 103.680339] IPv6: ADDRCONF(NETDEV_CHANGE): calibe80a16303a: link becomes ready This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:15 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 105.597263] kauditd_printk_skb: 435 callbacks suppressed [ 105.597266] audit: type=1325 audit(1747442476.343:1370): table=filter:121 family=2 entries=20 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.601577] audit: type=1300 audit(1747442476.343:1370): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffa22e5f80 a2=0 a3=7fffa22e5f6c items=0 ppid=2715 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.609641] audit: type=1327 audit(1747442476.343:1370): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 105.613501] audit: type=1325 audit(1747442476.359:1371): table=nat:122 family=2 entries=14 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.616513] audit: type=1300 audit(1747442476.359:1371): arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fffa22e5f80 a2=0 a3=0 items=0 ppid=2715 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.622605] audit: type=1327 audit(1747442476.359:1371): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:16 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 105.717090] audit: type=1400 audit(1747442476.463:1372): avc: denied { watch } for pid=5143 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_40_56.219273776/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c173,c939 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c173,c939 tclass=file permissive=0 [ 105.722867] audit: type=1300 audit(1747442476.463:1372): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000fab0c0 a2=fc6 a3=0 items=0 ppid=4571 pid=5143 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c173,c939 key=(null) [ 105.730039] audit: type=1327 audit(1747442476.463:1372): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 106.583346] audit: type=1130 audit(1747442477.330:1373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.25.158:22-139.178.68.195:40022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' This is ip-172-31-25-158 (Linux x86_64 5.15.182-flatcar) 00:41:17 SSH host key: SHA256:o0T1udF0/rssSAYaSVBbFOIVxHQrNURSqtqeMguHjVQ (ECDSA) SSH host key: SHA256:MwXUbDyJ16J9QJVqliMhkZFLf5u3HgoBZxA/FWnZnMY (ED25519) SSH host key: SHA256:doTRTc5L2VcMfNKNeQs0Cj2DGEoxNZUGECOVo1x1pKw (RSA) eth0: 172.31.25.158 fe80::499:acff:fe86:1dbb ip-172-31-25-158 login: [ 111.835801] kauditd_printk_skb: 91 callbacks suppressed [ 111.835805] audit: type=1400 audit(1747442482.581:1408): avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.843893] audit: type=1300 audit(1747442482.581:1408): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7efd94056b18 items=0 ppid=4982 pid=5266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.853165] audit: type=1327 audit(1747442482.581:1408): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561363563646266356537643536353764363231633563363535363835 [ 111.867501] audit: type=1400 audit(1747442482.581:1409): avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.874874] audit: type=1400 audit(1747442482.581:1409): avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.882515] audit: type=1400 audit(1747442482.581:1409): avc: denied { bpf } for pid=5266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.896131] audit: type=1400 audit(1747442482.581:1409): avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.904142] audit: type=1400 audit(1747442482.581:1409): avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.910920] audit: type=1400 audit(1747442482.581:1409): avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 111.918942] audit: type=1400 audit(1747442482.581:1409): avc: denied { perfmon } for pid=5266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.929237] kauditd_printk_skb: 193 callbacks suppressed [ 116.929240] audit: type=1400 audit(1747442487.675:1474): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 116.939385] audit: type=1300 audit(1747442487.675:1474): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007777a0 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 116.949669] audit: type=1327 audit(1747442487.675:1474): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 116.959034] audit: type=1400 audit(1747442487.675:1475): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 116.967110] audit: type=1300 audit(1747442487.675:1475): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001354420 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 116.976625] audit: type=1327 audit(1747442487.675:1475): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 116.990440] audit: type=1400 audit(1747442487.698:1476): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 117.000259] audit: type=1300 audit(1747442487.698:1476): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000777880 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 117.016898] audit: type=1327 audit(1747442487.698:1476): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 117.033987] audit: type=1400 audit(1747442487.698:1477): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.427896] kauditd_printk_skb: 10 callbacks suppressed [ 122.427899] audit: type=1106 audit(1747442493.174:1484): pid=5790 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 122.438720] audit: type=1104 audit(1747442493.174:1485): pid=5790 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 122.445388] audit: type=1131 audit(1747442493.176:1486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.25.158:22-139.178.68.195:35244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 127.455738] audit: type=1130 audit(1747442498.203:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.158:22-139.178.68.195:35752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 127.694153] audit: type=1101 audit(1747442498.441:1488): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 127.701945] audit: type=1103 audit(1747442498.449:1489): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 127.709482] audit: type=1006 audit(1747442498.450:1490): pid=5827 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 127.714874] audit: type=1300 audit(1747442498.450:1490): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0b237d70 a2=3 a3=0 items=0 ppid=1 pid=5827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.723267] audit: type=1327 audit(1747442498.450:1490): proctitle=737368643A20636F7265205B707269765D [ 127.743882] audit: type=1105 audit(1747442498.491:1491): pid=5827 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 127.751824] audit: type=1103 audit(1747442498.496:1492): pid=5829 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 128.340509] audit: type=1106 audit(1747442499.087:1493): pid=5827 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 128.348316] audit: type=1104 audit(1747442499.087:1494): pid=5827 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.354817] kauditd_printk_skb: 1 callbacks suppressed [ 133.354820] audit: type=1130 audit(1747442504.101:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.158:22-139.178.68.195:43008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.564825] audit: type=1101 audit(1747442504.311:1497): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.572599] audit: type=1103 audit(1747442504.319:1498): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.579555] audit: type=1006 audit(1747442504.319:1499): pid=5841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 133.583643] audit: type=1300 audit(1747442504.319:1499): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff83547cc0 a2=3 a3=0 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.591310] audit: type=1327 audit(1747442504.319:1499): proctitle=737368643A20636F7265205B707269765D [ 133.596947] audit: type=1105 audit(1747442504.344:1500): pid=5841 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.604660] audit: type=1103 audit(1747442504.344:1501): pid=5843 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.867583] audit: type=1106 audit(1747442504.614:1502): pid=5841 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.875307] audit: type=1104 audit(1747442504.615:1503): pid=5841 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 138.896861] kauditd_printk_skb: 1 callbacks suppressed [ 138.896863] audit: type=1130 audit(1747442509.644:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.158:22-139.178.68.195:43024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.162879] audit: type=1101 audit(1747442509.909:1506): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 139.173369] audit: type=1103 audit(1747442509.920:1507): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 139.181554] audit: type=1006 audit(1747442509.920:1508): pid=5853 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 139.187201] audit: type=1300 audit(1747442509.920:1508): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb6806f50 a2=3 a3=0 items=0 ppid=1 pid=5853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.197136] audit: type=1327 audit(1747442509.920:1508): proctitle=737368643A20636F7265205B707269765D [ 139.217720] audit: type=1105 audit(1747442509.964:1509): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 139.227503] audit: type=1103 audit(1747442509.967:1510): pid=5861 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 139.959695] audit: type=1106 audit(1747442510.707:1511): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 139.967864] audit: type=1104 audit(1747442510.708:1512): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 143.911802] kauditd_printk_skb: 24 callbacks suppressed [ 143.911805] audit: type=1105 audit(1747442514.659:1529): pid=5902 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 143.920942] audit: type=1103 audit(1747442514.666:1530): pid=5907 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.199846] audit: type=1106 audit(1747442515.945:1531): pid=5902 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.211626] audit: type=1104 audit(1747442515.945:1532): pid=5902 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.220008] audit: type=1131 audit(1747442515.956:1533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.25.158:22-139.178.68.195:53700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.235200] audit: type=1130 audit(1747442515.981:1534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.25.158:22-139.178.68.195:53704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.317844] audit: type=1325 audit(1747442516.064:1535): table=filter:133 family=2 entries=24 op=nft_register_rule pid=5923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 145.322975] audit: type=1300 audit(1747442516.064:1535): arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7ffe5cd0fa60 a2=0 a3=7ffe5cd0fa4c items=0 ppid=2715 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.334121] audit: type=1327 audit(1747442516.064:1535): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 145.341212] audit: type=1325 audit(1747442516.088:1536): table=nat:134 family=2 entries=22 op=nft_register_rule pid=5923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.357063] kauditd_printk_skb: 29 callbacks suppressed [ 152.357066] audit: type=1130 audit(1747442523.104:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.25.158:22-139.178.68.195:53722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.722378] audit: type=1101 audit(1747442523.468:1557): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.733460] audit: type=1103 audit(1747442523.469:1558): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.744826] audit: type=1006 audit(1747442523.469:1559): pid=5948 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 152.751257] audit: type=1300 audit(1747442523.469:1559): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd750ee0e0 a2=3 a3=0 items=0 ppid=1 pid=5948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.761797] audit: type=1327 audit(1747442523.469:1559): proctitle=737368643A20636F7265205B707269765D [ 152.783528] audit: type=1105 audit(1747442523.531:1560): pid=5948 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.794408] audit: type=1103 audit(1747442523.531:1561): pid=5951 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 152.811961] audit: type=1325 audit(1747442523.559:1562): table=filter:137 family=2 entries=24 op=nft_register_rule pid=5952 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.816411] audit: type=1300 audit(1747442523.559:1562): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff79b01970 a2=0 a3=7fff79b0195c items=0 ppid=2715 pid=5952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.384642] kauditd_printk_skb: 7 callbacks suppressed [ 158.384645] audit: type=1130 audit(1747442529.132:1567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.158:22-139.178.68.195:34464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.656772] audit: type=1101 audit(1747442529.403:1568): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 158.667355] audit: type=1103 audit(1747442529.414:1569): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 158.676650] audit: type=1006 audit(1747442529.414:1570): pid=5983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 158.682364] audit: type=1300 audit(1747442529.414:1570): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8a88f6d0 a2=3 a3=0 items=0 ppid=1 pid=5983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.709058] audit: type=1327 audit(1747442529.414:1570): proctitle=737368643A20636F7265205B707269765D [ 158.719466] audit: type=1105 audit(1747442529.463:1571): pid=5983 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 158.730384] audit: type=1103 audit(1747442529.465:1572): pid=5985 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.669727] audit: type=1106 audit(1747442530.417:1573): pid=5983 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.679720] audit: type=1104 audit(1747442530.418:1574): pid=5983 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.701169] kauditd_printk_skb: 1 callbacks suppressed [ 164.701172] audit: type=1130 audit(1747442535.449:1576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.158:22-139.178.68.195:46706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.924207] audit: type=1101 audit(1747442535.672:1577): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.933417] audit: type=1103 audit(1747442535.672:1578): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.944042] audit: type=1006 audit(1747442535.672:1579): pid=5996 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 164.951682] audit: type=1300 audit(1747442535.672:1579): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff348e5130 a2=3 a3=0 items=0 ppid=1 pid=5996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.973646] audit: type=1327 audit(1747442535.672:1579): proctitle=737368643A20636F7265205B707269765D [ 164.979964] audit: type=1105 audit(1747442535.727:1580): pid=5996 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 164.992273] audit: type=1103 audit(1747442535.739:1581): pid=5998 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.654884] audit: type=1106 audit(1747442536.402:1582): pid=5996 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 165.678325] audit: type=1104 audit(1747442536.413:1583): pid=5996 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.681599] kauditd_printk_skb: 28 callbacks suppressed [ 170.681602] audit: type=1130 audit(1747442541.429:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.158:22-139.178.68.195:46718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.932793] audit: type=1101 audit(1747442541.680:1595): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.944134] audit: type=1103 audit(1747442541.690:1596): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 170.959191] audit: type=1006 audit(1747442541.691:1597): pid=6008 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 170.967850] audit: type=1300 audit(1747442541.691:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7c72f7c0 a2=3 a3=0 items=0 ppid=1 pid=6008 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.979847] audit: type=1327 audit(1747442541.691:1597): proctitle=737368643A20636F7265205B707269765D [ 170.985838] audit: type=1105 audit(1747442541.733:1598): pid=6008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.000091] audit: type=1103 audit(1747442541.745:1599): pid=6010 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.416249] audit: type=1106 audit(1747442542.164:1600): pid=6008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 171.428188] audit: type=1104 audit(1747442542.164:1601): pid=6008 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.443568] kauditd_printk_skb: 4 callbacks suppressed [ 176.443571] audit: type=1130 audit(1747442547.191:1604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.158:22-139.178.68.195:51396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.681464] audit: type=1101 audit(1747442547.427:1605): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.692124] audit: type=1103 audit(1747442547.429:1606): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.702338] audit: type=1006 audit(1747442547.429:1607): pid=6041 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 176.708122] audit: type=1300 audit(1747442547.429:1607): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcadb74eb0 a2=3 a3=0 items=0 ppid=1 pid=6041 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.717730] audit: type=1327 audit(1747442547.429:1607): proctitle=737368643A20636F7265205B707269765D [ 176.740216] audit: type=1105 audit(1747442547.488:1608): pid=6041 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.752453] audit: type=1103 audit(1747442547.499:1609): pid=6043 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.952339] audit: type=1400 audit(1747442547.700:1610): avc: denied { watch } for pid=2468 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 176.959532] audit: type=1300 audit(1747442547.700:1610): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000bc7de0 a2=fc6 a3=0 items=0 ppid=2325 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c725 key=(null) [ 182.720977] kauditd_printk_skb: 13 callbacks suppressed [ 182.720980] audit: type=1130 audit(1747442553.468:1617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.158:22-139.178.68.195:51404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.982681] audit: type=1101 audit(1747442553.731:1618): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.991559] audit: type=1103 audit(1747442553.732:1619): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.999728] audit: type=1006 audit(1747442553.732:1620): pid=6083 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 183.004632] audit: type=1300 audit(1747442553.732:1620): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2518bc80 a2=3 a3=0 items=0 ppid=1 pid=6083 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.021540] audit: type=1327 audit(1747442553.732:1620): proctitle=737368643A20636F7265205B707269765D [ 183.027974] audit: type=1105 audit(1747442553.776:1621): pid=6083 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 183.041904] audit: type=1103 audit(1747442553.789:1622): pid=6085 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 183.906418] audit: type=1106 audit(1747442554.654:1623): pid=6083 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 183.923385] audit: type=1104 audit(1747442554.654:1624): pid=6083 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 200.066007] kauditd_printk_skb: 1 callbacks suppressed [ 200.066010] audit: type=1334 audit(1747442570.814:1626): prog-id=83 op=UNLOAD [ 200.070364] audit: type=1334 audit(1747442570.814:1627): prog-id=91 op=UNLOAD [ 200.133197] audit: type=1334 audit(1747442570.881:1628): prog-id=120 op=UNLOAD [ 200.139865] audit: type=1334 audit(1747442570.888:1629): prog-id=123 op=UNLOAD [ 201.029629] audit: type=1400 audit(1747442571.778:1630): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 201.038511] audit: type=1400 audit(1747442571.778:1631): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 201.044694] audit: type=1400 audit(1747442571.778:1632): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 201.055453] audit: type=1400 audit(1747442571.778:1633): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 201.068494] audit: type=1400 audit(1747442571.778:1634): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 201.078081] audit: type=1400 audit(1747442571.778:1635): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0