ccess=no exit=-13 a0=6 a1=40005a73e0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 62.927285] audit: type=1327 audit(1742235564.488:556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 63.655724] audit: type=1400 audit(1742235565.289:558): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 63.665387] audit: type=1300 audit(1742235565.289:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4006da2a20 a2=fc6 a3=0 items=0 ppid=2417 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 key=(null) [ 63.676257] audit: type=1327 audit(1742235565.289:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32352E3937002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 63.690396] audit: type=1400 audit(1742235565.322:559): avc: denied { watch } for pid=2592 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c720,c884 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.236047] kauditd_printk_skb: 272 callbacks suppressed [ 68.236052] audit: type=1400 audit(1742235569.873:813): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.251355] audit: type=1300 audit(1742235569.873:813): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8460 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 68.263366] audit: type=1327 audit(1742235569.873:813): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.273525] audit: type=1400 audit(1742235569.887:814): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.282665] audit: type=1300 audit(1742235569.887:814): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8660 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 68.296710] audit: type=1327 audit(1742235569.887:814): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.306665] audit: type=1400 audit(1742235569.888:815): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.315758] audit: type=1300 audit(1742235569.888:815): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000dd8820 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 68.327202] audit: type=1327 audit(1742235569.888:815): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.337649] audit: type=1400 audit(1742235569.901:816): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 73.691079] kauditd_printk_skb: 5 callbacks suppressed [ 73.691083] audit: type=1400 audit(1742235575.329:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.702673] audit: type=1400 audit(1742235575.329:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.709861] audit: type=1400 audit(1742235575.329:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.728631] audit: type=1400 audit(1742235575.329:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.736731] audit: type=1400 audit(1742235575.329:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.756394] audit: type=1400 audit(1742235575.329:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.768957] audit: type=1400 audit(1742235575.329:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.790948] audit: type=1400 audit(1742235575.329:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.813720] audit: type=1400 audit(1742235575.329:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 73.823460] audit: type=1400 audit(1742235575.330:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.763094] kauditd_printk_skb: 305 callbacks suppressed [ 79.763098] audit: type=1400 audit(1742235581.404:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.772675] audit: type=1400 audit(1742235581.413:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.779674] audit: type=1400 audit(1742235581.413:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.786511] audit: type=1400 audit(1742235581.413:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.793551] audit: type=1400 audit(1742235581.413:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.801127] audit: type=1400 audit(1742235581.413:921): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.810658] audit: type=1400 audit(1742235581.413:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.820850] audit: type=1400 audit(1742235581.413:923): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.828055] audit: type=1400 audit(1742235581.413:924): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.835297] audit: type=1400 audit(1742235581.413:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.909785] kauditd_printk_skb: 59 callbacks suppressed [ 85.909790] audit: type=1325 audit(1742235587.552:938): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 85.918773] audit: type=1300 audit(1742235587.552:938): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.931304] audit: type=1327 audit(1742235587.552:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 85.938608] audit: type=1325 audit(1742235587.581:939): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 85.945651] audit: type=1300 audit(1742235587.581:939): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe9956f90 a2=0 a3=1 items=0 ppid=2993 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.956761] audit: type=1327 audit(1742235587.581:939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 87.021523] audit: type=1325 audit(1742235588.664:940): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 87.035022] audit: type=1300 audit(1742235588.664:940): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffecd29b80 a2=0 a3=1 items=0 ppid=2993 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.056381] audit: type=1327 audit(1742235588.664:940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 87.065395] audit: type=1325 audit(1742235588.699:941): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.263696] kauditd_printk_skb: 160 callbacks suppressed [ 93.263701] audit: type=1400 audit(1742235594.908:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.272936] audit: type=1400 audit(1742235594.908:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.282746] audit: type=1400 audit(1742235594.908:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.293029] audit: type=1400 audit(1742235594.908:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.308426] audit: type=1400 audit(1742235594.908:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.316262] audit: type=1400 audit(1742235594.908:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.323551] audit: type=1400 audit(1742235594.908:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.330866] audit: type=1400 audit(1742235594.908:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.338694] audit: type=1400 audit(1742235594.908:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 93.347413] audit: type=1400 audit(1742235594.910:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.579623] kauditd_printk_skb: 47 callbacks suppressed [ 99.579628] audit: type=1400 audit(1742235601.225:1003): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.589887] audit: type=1300 audit(1742235601.225:1003): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.600992] audit: type=1327 audit(1742235601.225:1003): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438373161313533383036646437643735613964636161393538623830 [ 99.613441] audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.621109] audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.628613] audit: type=1400 audit(1742235601.225:1004): avc: denied { bpf } for pid=3452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.636418] audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.644779] audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.652435] audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 99.660324] audit: type=1400 audit(1742235601.225:1004): avc: denied { perfmon } for pid=3452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.365520] kauditd_printk_skb: 34 callbacks suppressed [ 110.365525] audit: type=1325 audit(1742235612.013:1010): table=filter:97 family=2 entries=17 op=nft_register_rule pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.373251] audit: type=1300 audit(1742235612.013:1010): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.384138] audit: type=1327 audit(1742235612.013:1010): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 110.391806] audit: type=1325 audit(1742235612.039:1011): table=nat:98 family=2 entries=19 op=nft_register_chain pid=3821 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.398105] audit: type=1300 audit(1742235612.039:1011): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffed7e1890 a2=0 a3=1 items=0 ppid=2993 pid=3821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.411675] audit: type=1327 audit(1742235612.039:1011): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.196313] audit: type=1400 audit(1742235613.844:1012): avc: denied { perfmon } for pid=3832 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 112.204844] audit: type=1300 audit(1742235613.844:1012): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3265 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.216101] audit: type=1327 audit(1742235613.844:1012): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430393530383735366461613364653037663136346462353236303336 [ 112.228351] audit: type=1400 audit(1742235613.844:1013): avc: denied { bpf } for pid=3832 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 112.415989] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 112.418905] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 114.153120] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 114.155362] IPv6: ADDRCONF(NETDEV_CHANGE): calia3c925e4515: link becomes ready [ 115.578173] kauditd_printk_skb: 242 callbacks suppressed [ 115.578178] audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.587000] audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.596223] audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.603169] audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.610152] audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.619160] audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.626238] audit: type=1400 audit(1742235617.227:1072): avc: denied { perfmon } for pid=4197 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.635178] audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.642006] audit: type=1400 audit(1742235617.227:1072): avc: denied { bpf } for pid=4197 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.654881] audit: type=1334 audit(1742235617.227:1072): prog-id=153 op=LOAD This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:18 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: [ 116.907114] IPv6: ADDRCONF(NETDEV_CHANGE): cali524726e99fb: link becomes ready [ 117.075867] IPv6: ADDRCONF(NETDEV_CHANGE): cali55b2e5e9a6d: link becomes ready This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:19 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: [ 117.907789] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 117.909986] IPv6: ADDRCONF(NETDEV_CHANGE): cali86e03ad5b56: link becomes ready This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:20 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: [ 118.925127] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 118.927300] IPv6: ADDRCONF(NETDEV_CHANGE): cali22516bce9e9: link becomes ready [ 119.147709] IPv6: ADDRCONF(NETDEV_CHANGE): calidea0e613113: link becomes ready This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:21 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:22 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: [ 120.996074] kauditd_printk_skb: 799 callbacks suppressed [ 120.996079] audit: type=1400 audit(1742235622.644:1283): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.007158] audit: type=1400 audit(1742235622.652:1284): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.016852] audit: type=1400 audit(1742235622.652:1285): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.023909] audit: type=1400 audit(1742235622.652:1286): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.031429] audit: type=1400 audit(1742235622.652:1287): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.039244] audit: type=1400 audit(1742235622.652:1288): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.072635] audit: type=1400 audit(1742235622.652:1289): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.081236] audit: type=1400 audit(1742235622.652:1290): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.088103] audit: type=1400 audit(1742235622.652:1291): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.095158] audit: type=1400 audit(1742235622.653:1292): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-25-97 (Linux aarch64 5.15.179-flatcar) 18:20:23 SSH host key: SHA256:IjlduN0ABAOBqfuorvv+YSvFC9B+VWAhIJn3XT6PYIU (ED25519) SSH host key: SHA256:0so7hsdTOfszewaX/fVQ+WPegCAKdgVD6WjJ25yGO6k (RSA) SSH host key: SHA256:wKPFSrEsWAhuR9l7X3LM7YrBkfWhCrm2NTi4K+vxkW4 (ECDSA) eth0: 172.31.25.97 fe80::45d:8cff:fe3a:a7 ip-172-31-25-97 login: [ 127.393119] kauditd_printk_skb: 131 callbacks suppressed [ 127.393123] audit: type=1130 audit(1742235629.038:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.25.97:22-139.178.89.65:36724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 127.604422] audit: type=1101 audit(1742235629.249:1327): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.616209] audit: type=1103 audit(1742235629.261:1328): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.632620] audit: type=1006 audit(1742235629.261:1329): pid=4931 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 127.649380] audit: type=1300 audit(1742235629.261:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea10e7a0 a2=3 a3=1 items=0 ppid=1 pid=4931 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.665061] audit: type=1327 audit(1742235629.261:1329): proctitle=737368643A20636F7265205B707269765D [ 127.676227] audit: type=1105 audit(1742235629.321:1330): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 127.690489] audit: type=1103 audit(1742235629.333:1331): pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.028052] audit: type=1106 audit(1742235629.673:1332): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.046710] audit: type=1104 audit(1742235629.673:1333): pid=4931 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.057856] kauditd_printk_skb: 182 callbacks suppressed [ 133.057861] audit: type=1130 audit(1742235634.702:1385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.25.97:22-139.178.89.65:59872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.268579] audit: type=1101 audit(1742235634.912:1386): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.279657] audit: type=1103 audit(1742235634.923:1387): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.290354] audit: type=1006 audit(1742235634.923:1388): pid=5383 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 133.296927] audit: type=1300 audit(1742235634.923:1388): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1f6cc10 a2=3 a3=1 items=0 ppid=1 pid=5383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.311687] audit: type=1327 audit(1742235634.923:1388): proctitle=737368643A20636F7265205B707269765D [ 133.347522] audit: type=1105 audit(1742235634.991:1389): pid=5383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.360243] audit: type=1103 audit(1742235635.003:1390): pid=5385 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 133.380217] audit: type=1400 audit(1742235635.024:1391): avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 [ 133.394314] audit: type=1300 audit(1742235635.024:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40018222c0 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) [ 139.711869] kauditd_printk_skb: 29 callbacks suppressed [ 139.711873] audit: type=1130 audit(1742235641.355:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.25.97:22-139.178.89.65:41500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.893362] audit: type=1101 audit(1742235641.536:1415): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.903293] audit: type=1103 audit(1742235641.538:1416): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.912452] audit: type=1006 audit(1742235641.538:1417): pid=5427 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 139.918220] audit: type=1300 audit(1742235641.538:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc99f9b60 a2=3 a3=1 items=0 ppid=1 pid=5427 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.928122] audit: type=1327 audit(1742235641.538:1417): proctitle=737368643A20636F7265205B707269765D [ 139.947452] audit: type=1105 audit(1742235641.590:1418): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.958311] audit: type=1103 audit(1742235641.593:1419): pid=5429 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.203242] audit: type=1106 audit(1742235641.845:1420): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.213877] audit: type=1104 audit(1742235641.845:1421): pid=5427 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.232556] kauditd_printk_skb: 1 callbacks suppressed [ 145.232561] audit: type=1130 audit(1742235646.875:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.25.97:22-139.178.89.65:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.437291] audit: type=1101 audit(1742235647.079:1424): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.448057] audit: type=1103 audit(1742235647.089:1425): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.457913] audit: type=1006 audit(1742235647.090:1426): pid=5464 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 145.464836] audit: type=1300 audit(1742235647.090:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff964de00 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.475318] audit: type=1327 audit(1742235647.090:1426): proctitle=737368643A20636F7265205B707269765D [ 145.497573] audit: type=1105 audit(1742235647.140:1427): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.511871] audit: type=1103 audit(1742235647.143:1428): pid=5466 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.832372] audit: type=1106 audit(1742235647.474:1429): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.846121] audit: type=1104 audit(1742235647.474:1430): pid=5464 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.861221] kauditd_printk_skb: 1 callbacks suppressed [ 150.861225] audit: type=1130 audit(1742235652.503:1432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.25.97:22-139.178.89.65:47216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.038483] audit: type=1101 audit(1742235652.680:1433): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.049770] audit: type=1103 audit(1742235652.691:1434): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.058545] audit: type=1006 audit(1742235652.691:1435): pid=5480 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 151.064012] audit: type=1300 audit(1742235652.691:1435): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea3c9370 a2=3 a3=1 items=0 ppid=1 pid=5480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.074053] audit: type=1327 audit(1742235652.691:1435): proctitle=737368643A20636F7265205B707269765D [ 151.092981] audit: type=1105 audit(1742235652.735:1436): pid=5480 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.103851] audit: type=1103 audit(1742235652.735:1437): pid=5482 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.349478] audit: type=1325 audit(1742235652.991:1438): table=filter:117 family=2 entries=9 op=nft_register_rule pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 151.355225] audit: type=1300 audit(1742235652.991:1438): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe72d3ab0 a2=0 a3=1 items=0 ppid=2993 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.432128] kauditd_printk_skb: 7 callbacks suppressed [ 156.432132] audit: type=1130 audit(1742235658.074:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.25.97:22-139.178.89.65:47218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.470480] audit: type=1325 audit(1742235658.112:1444): table=filter:119 family=2 entries=8 op=nft_register_rule pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.486204] audit: type=1300 audit(1742235658.112:1444): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.499084] audit: type=1327 audit(1742235658.112:1444): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 156.517267] audit: type=1325 audit(1742235658.158:1445): table=nat:120 family=2 entries=34 op=nft_register_chain pid=5536 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.528023] audit: type=1300 audit(1742235658.158:1445): arch=c00000b7 syscall=211 success=yes exit=11236 a0=3 a1=ffffd8aa1970 a2=0 a3=1 items=0 ppid=2993 pid=5536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.542103] audit: type=1327 audit(1742235658.158:1445): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 156.657328] audit: type=1101 audit(1742235658.299:1446): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.669583] audit: type=1103 audit(1742235658.311:1447): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.678944] audit: type=1006 audit(1742235658.311:1448): pid=5535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 165.800245] kauditd_printk_skb: 63 callbacks suppressed [ 165.800261] audit: type=1130 audit(1742235667.439:1494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.25.97:22-139.178.89.65:42554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.972240] audit: type=1101 audit(1742235667.613:1495): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.981736] audit: type=1103 audit(1742235667.616:1496): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.992908] audit: type=1006 audit(1742235667.616:1497): pid=5606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 165.999434] audit: type=1300 audit(1742235667.616:1497): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe20955d0 a2=3 a3=1 items=0 ppid=1 pid=5606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.009281] audit: type=1327 audit(1742235667.616:1497): proctitle=737368643A20636F7265205B707269765D [ 166.026809] audit: type=1105 audit(1742235667.668:1498): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.044322] audit: type=1103 audit(1742235667.680:1499): pid=5608 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.273760] audit: type=1106 audit(1742235667.915:1500): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.285574] audit: type=1104 audit(1742235667.915:1501): pid=5606 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.303244] kauditd_printk_skb: 7 callbacks suppressed [ 171.303250] audit: type=1130 audit(1742235672.944:1505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.25.97:22-139.178.89.65:40138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.482600] audit: type=1101 audit(1742235673.124:1506): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.493202] audit: type=1103 audit(1742235673.126:1507): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.503093] audit: type=1006 audit(1742235673.126:1508): pid=5621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 171.509108] audit: type=1300 audit(1742235673.126:1508): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1de5fb0 a2=3 a3=1 items=0 ppid=1 pid=5621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.519389] audit: type=1327 audit(1742235673.126:1508): proctitle=737368643A20636F7265205B707269765D [ 171.543130] audit: type=1105 audit(1742235673.184:1509): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.554839] audit: type=1103 audit(1742235673.196:1510): pid=5623 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.803889] audit: type=1106 audit(1742235673.445:1511): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.814627] audit: type=1104 audit(1742235673.447:1512): pid=5621 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.831287] kauditd_printk_skb: 1 callbacks suppressed [ 176.831292] audit: type=1130 audit(1742235678.473:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.25.97:22-139.178.89.65:40148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.012675] audit: type=1101 audit(1742235678.654:1515): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.024118] audit: type=1103 audit(1742235678.665:1516): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.034136] audit: type=1006 audit(1742235678.665:1517): pid=5654 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 177.040108] audit: type=1300 audit(1742235678.665:1517): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9e0530 a2=3 a3=1 items=0 ppid=1 pid=5654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.051534] audit: type=1327 audit(1742235678.665:1517): proctitle=737368643A20636F7265205B707269765D [ 177.076336] audit: type=1105 audit(1742235678.718:1518): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.088773] audit: type=1103 audit(1742235678.723:1519): pid=5656 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.359808] audit: type=1106 audit(1742235679.001:1520): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.373757] audit: type=1104 audit(1742235679.002:1521): pid=5654 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.391119] kauditd_printk_skb: 1 callbacks suppressed [ 182.391124] audit: type=1130 audit(1742235684.032:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.25.97:22-139.178.89.65:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.583524] audit: type=1101 audit(1742235684.225:1524): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.597530] audit: type=1103 audit(1742235684.236:1525): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.607139] audit: type=1006 audit(1742235684.237:1526): pid=5688 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 182.613255] audit: type=1300 audit(1742235684.237:1526): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff8bcb70 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.624212] audit: type=1327 audit(1742235684.237:1526): proctitle=737368643A20636F7265205B707269765D [ 182.648675] audit: type=1105 audit(1742235684.289:1527): pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.669432] audit: type=1103 audit(1742235684.304:1528): pid=5690 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 182.854992] audit: type=1400 audit(1742235684.496:1529): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 182.866269] audit: type=1300 audit(1742235684.496:1529): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001c829c0 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 187.979950] kauditd_printk_skb: 25 callbacks suppressed [ 187.979955] audit: type=1130 audit(1742235689.622:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.25.97:22-139.178.89.65:40226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.160286] audit: type=1101 audit(1742235689.802:1541): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.174329] audit: type=1103 audit(1742235689.814:1542): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.191684] audit: type=1006 audit(1742235689.814:1543): pid=5703 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 188.200794] audit: type=1300 audit(1742235689.814:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6b57940 a2=3 a3=1 items=0 ppid=1 pid=5703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.212230] audit: type=1327 audit(1742235689.814:1543): proctitle=737368643A20636F7265205B707269765D [ 188.215608] audit: type=1105 audit(1742235689.847:1544): pid=5703 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.227513] audit: type=1103 audit(1742235689.854:1545): pid=5705 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.247019] audit: type=1400 audit(1742235689.889:1546): avc: denied { watch } for pid=2582 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.255608] audit: type=1300 audit(1742235689.889:1546): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001e21140 a2=fc6 a3=0 items=0 ppid=2402 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c181,c885 key=(null) [ 193.383235] kauditd_printk_skb: 13 callbacks suppressed [ 193.383240] audit: type=1400 audit(1742235695.026:1553): avc: denied { watch } for pid=5269 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.147743412/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c186,c511 tclass=file permissive=0 [ 193.395043] audit: type=1300 audit(1742235695.026:1553): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40020d7400 a2=fc6 a3=0 items=0 ppid=4768 pid=5269 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c186,c511 key=(null) [ 193.406134] audit: type=1327 audit(1742235695.026:1553): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 193.443090] audit: type=1400 audit(1742235695.086:1554): avc: denied { watch } for pid=5201 comm="apiserver" path="/calico-apiserver-certs/..2025_03_17_18_20_02.1514046198/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c430 tclass=file permissive=0 [ 193.453097] audit: type=1300 audit(1742235695.086:1554): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e5a0 a2=fc6 a3=0 items=0 ppid=4719 pid=5201 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c430 key=(null) [ 193.464214] audit: type=1327 audit(1742235695.086:1554): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 193.529503] audit: type=1130 audit(1742235695.172:1555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.25.97:22-139.178.89.65:60810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.707243] audit: type=1101 audit(1742235695.350:1556): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 193.717629] audit: type=1103 audit(1742235695.352:1557): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 193.726660] audit: type=1006 audit(1742235695.352:1558): pid=5715 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 199.028484] kauditd_printk_skb: 7 callbacks suppressed [ 199.028489] audit: type=1130 audit(1742235700.671:1564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.25.97:22-139.178.89.65:60812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.208907] audit: type=1101 audit(1742235700.851:1565): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.220408] audit: type=1103 audit(1742235700.862:1566): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.229428] audit: type=1006 audit(1742235700.862:1567): pid=5735 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 199.235513] audit: type=1300 audit(1742235700.862:1567): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffd0cd9e0 a2=3 a3=1 items=0 ppid=1 pid=5735 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.245327] audit: type=1327 audit(1742235700.862:1567): proctitle=737368643A20636F7265205B707269765D [ 199.268434] audit: type=1105 audit(1742235700.910:1568): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.279244] audit: type=1103 audit(1742235700.911:1569): pid=5737 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.513835] audit: type=1106 audit(1742235701.156:1570): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.525643] audit: type=1104 audit(1742235701.156:1571): pid=5735 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'