exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 27.440406] Initializing XFRM netlink socket This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:21:32 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 39.624850] kauditd_printk_skb: 88 callbacks suppressed [ 39.624853] audit: type=1130 audit(1757118103.208:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.628890] audit: type=1131 audit(1757118103.208:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.891422] audit: type=1130 audit(1757118103.474:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.008617] audit: type=1131 audit(1757118103.592:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 44.009154] audit: type=1130 audit(1757118107.592:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.012672] audit: type=1131 audit(1757118107.592:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.437344] audit: type=1400 audit(1757118108.020:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 44.440880] audit: type=1400 audit(1757118108.020:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 44.444313] audit: type=1400 audit(1757118108.020:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 44.449699] audit: type=1400 audit(1757118108.020:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 44.823473] kauditd_printk_skb: 209 callbacks suppressed [ 44.823476] audit: type=1130 audit(1757118108.406:462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.560602] audit: type=1400 audit(1757118109.144:463): avc: denied { mac_admin } for pid=2259 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 45.565972] audit: type=1401 audit(1757118109.144:463): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 45.570376] audit: type=1300 audit(1757118109.144:463): arch=c000003e syscall=188 success=no exit=-22 a0=c0008acdb0 a1=c000ae2918 a2=c0008acd80 a3=25 items=0 ppid=1 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.580079] audit: type=1327 audit(1757118109.144:463): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 45.588643] audit: type=1400 audit(1757118109.144:464): avc: denied { mac_admin } for pid=2259 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 45.600366] audit: type=1401 audit(1757118109.144:464): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 45.605053] audit: type=1300 audit(1757118109.144:464): arch=c000003e syscall=188 success=no exit=-22 a0=c000a3c300 a1=c000ae2930 a2=c0008ace40 a3=25 items=0 ppid=1 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.619189] audit: type=1327 audit(1757118109.144:464): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 45.629475] audit: type=1325 audit(1757118109.144:465): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 52.612449] kauditd_printk_skb: 409 callbacks suppressed [ 52.612452] audit: type=1400 audit(1757118116.195:598): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.624452] audit: type=1400 audit(1757118116.196:599): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.631793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.633951] audit: type=1400 audit(1757118116.196:600): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.634015] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 52.640921] audit: type=1400 audit(1757118116.196:601): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.642609] audit: backlog limit exceeded [ 52.650777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.652846] audit: type=1400 audit(1757118116.196:602): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 52.652872] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 57.906979] kauditd_printk_skb: 267 callbacks suppressed [ 57.906982] audit: type=1400 audit(1757118121.490:850): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.915871] audit: type=1400 audit(1757118121.490:851): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.922940] audit: type=1400 audit(1757118121.490:852): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.930212] audit: type=1400 audit(1757118121.490:853): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.936461] audit: type=1400 audit(1757118121.490:854): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.943362] audit: type=1400 audit(1757118121.490:855): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.951967] audit: type=1400 audit(1757118121.490:856): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.961481] audit: type=1400 audit(1757118121.490:857): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.969748] audit: type=1400 audit(1757118121.490:858): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.977057] audit: type=1400 audit(1757118121.490:859): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 67.638157] kauditd_printk_skb: 357 callbacks suppressed [ 67.638160] audit: type=1106 audit(1757118131.221:961): pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 67.650260] audit: type=1104 audit(1757118131.221:962): pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 67.694390] audit: type=1106 audit(1757118131.277:963): pid=1999 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 67.712061] audit: type=1104 audit(1757118131.277:964): pid=1999 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 67.721272] audit: type=1131 audit(1757118131.290:965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.193:22-139.178.68.195:39176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.789729] audit: type=1325 audit(1757118132.373:966): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 68.795801] audit: type=1300 audit(1757118132.373:966): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcca1390d0 a2=0 a3=7ffcca1390bc items=0 ppid=2749 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 68.814826] audit: type=1327 audit(1757118132.373:966): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 68.820374] audit: type=1325 audit(1757118132.394:967): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 68.828042] audit: type=1300 audit(1757118132.394:967): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcca1390d0 a2=0 a3=0 items=0 ppid=2749 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.191022] kauditd_printk_skb: 7 callbacks suppressed [ 73.191025] audit: type=1325 audit(1757118136.774:970): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.199661] audit: type=1300 audit(1757118136.774:970): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff7989a790 a2=0 a3=7fff7989a77c items=0 ppid=2749 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.211491] audit: type=1327 audit(1757118136.774:970): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.222178] audit: type=1325 audit(1757118136.805:971): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.227690] audit: type=1300 audit(1757118136.805:971): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff7989a790 a2=0 a3=0 items=0 ppid=2749 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.239004] audit: type=1327 audit(1757118136.805:971): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.266924] audit: type=1325 audit(1757118136.850:972): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 73.273033] audit: type=1300 audit(1757118136.850:972): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff72ff15f0 a2=0 a3=7fff72ff15dc items=0 ppid=2749 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 73.288230] audit: type=1327 audit(1757118136.850:972): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 73.293542] audit: type=1325 audit(1757118136.871:973): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 79.478172] kauditd_printk_skb: 179 callbacks suppressed [ 79.478175] audit: type=1400 audit(1757118143.061:1030): avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.488559] audit: type=1300 audit(1757118143.061:1030): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f143c5a4948 items=0 ppid=3298 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 79.500111] audit: type=1327 audit(1757118143.061:1030): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265616666626433343539643066356330653837396664613931336262 [ 79.512354] audit: type=1400 audit(1757118143.062:1031): avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.521051] audit: type=1400 audit(1757118143.062:1031): avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.530743] audit: type=1400 audit(1757118143.062:1031): avc: denied { bpf } for pid=3416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.541206] audit: type=1400 audit(1757118143.062:1031): avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.550187] audit: type=1400 audit(1757118143.062:1031): avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.558785] audit: type=1400 audit(1757118143.062:1031): avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.566619] audit: type=1400 audit(1757118143.062:1031): avc: denied { perfmon } for pid=3416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.607711] kauditd_printk_skb: 34 callbacks suppressed [ 84.607713] audit: type=1400 audit(1757118148.191:1037): avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.615208] audit: type=1300 audit(1757118148.191:1037): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd05201ebd8 items=0 ppid=3298 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.622720] audit: type=1327 audit(1757118148.191:1037): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261336364643838313835323933613864353064323036616234303536 [ 84.634676] audit: type=1400 audit(1757118148.198:1038): avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.640627] audit: type=1400 audit(1757118148.198:1038): avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.648459] audit: type=1400 audit(1757118148.198:1038): avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.656289] audit: type=1400 audit(1757118148.198:1038): avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.663969] audit: type=1400 audit(1757118148.198:1038): avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.671931] audit: type=1400 audit(1757118148.198:1038): avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 84.686451] audit: type=1400 audit(1757118148.198:1038): avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.209361] kauditd_printk_skb: 34 callbacks suppressed [ 95.209364] audit: type=1400 audit(1757118158.792:1044): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.219494] audit: type=1300 audit(1757118158.792:1044): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f8f749c90a8 items=0 ppid=3298 pid=3902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.229507] audit: type=1327 audit(1757118158.792:1044): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663363435313135653661393537643262326462386639393430663532 [ 95.241484] audit: type=1400 audit(1757118158.793:1045): avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.250218] audit: type=1400 audit(1757118158.793:1045): avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.256650] audit: type=1400 audit(1757118158.793:1045): avc: denied { bpf } for pid=3902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.264015] audit: type=1400 audit(1757118158.793:1045): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.270866] audit: type=1400 audit(1757118158.793:1045): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.277033] audit: type=1400 audit(1757118158.793:1045): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.282608] audit: type=1400 audit(1757118158.793:1045): avc: denied { perfmon } for pid=3902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 95.756733] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 95.759536] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 98.807163] IPv6: ADDRCONF(NETDEV_CHANGE): calidac9f3fe344: link becomes ready [ 99.223443] IPv6: ADDRCONF(NETDEV_CHANGE): calif3fffea98f0: link becomes ready This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:42 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 99.379643] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 99.381054] IPv6: ADDRCONF(NETDEV_CHANGE): cali9b9125612ef: link becomes ready [ 99.895105] IPv6: ADDRCONF(NETDEV_CHANGE): calif3d62d53e15: link becomes ready [ 100.265776] kauditd_printk_skb: 842 callbacks suppressed [ 100.265779] audit: type=1400 audit(1757118163.848:1237): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.269749] audit: type=1400 audit(1757118163.848:1238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.272960] audit: type=1400 audit(1757118163.848:1239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.277921] audit: type=1400 audit(1757118163.848:1240): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.281067] audit: type=1400 audit(1757118163.848:1241): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.285222] audit: type=1400 audit(1757118163.848:1242): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.292139] audit: type=1400 audit(1757118163.848:1243): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.295644] audit: type=1400 audit(1757118163.848:1244): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.302355] audit: type=1400 audit(1757118163.848:1245): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.309524] audit: type=1400 audit(1757118163.849:1246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 100.865331] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 100.866435] IPv6: ADDRCONF(NETDEV_CHANGE): cali3bcf122913d: link becomes ready This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:44 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 101.763381] IPv6: ADDRCONF(NETDEV_CHANGE): cali3fd68873863: link becomes ready [ 101.924179] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 101.925580] IPv6: ADDRCONF(NETDEV_CHANGE): calib0b6c107098: link becomes ready This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:45 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 102.924020] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 102.925355] IPv6: ADDRCONF(NETDEV_CHANGE): calif140868a66a: link becomes ready This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:46 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:47 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:48 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 105.818816] kauditd_printk_skb: 491 callbacks suppressed [ 105.818819] audit: type=1325 audit(1757118169.402:1396): table=filter:121 family=2 entries=14 op=nft_register_rule pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.823212] audit: type=1300 audit(1757118169.402:1396): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6965e220 a2=0 a3=7ffd6965e20c items=0 ppid=2749 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.832479] audit: type=1327 audit(1757118169.402:1396): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 105.836849] audit: type=1325 audit(1757118169.420:1397): table=nat:122 family=2 entries=20 op=nft_register_rule pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.840129] audit: type=1300 audit(1757118169.420:1397): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd6965e220 a2=0 a3=7ffd6965e20c items=0 ppid=2749 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.847383] audit: type=1327 audit(1757118169.420:1397): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-21-193 (Linux x86_64 5.15.190-flatcar) 00:22:49 SSH host key: SHA256:FTYFmxSLCY7NcCM96uL7ET8eBKv5XYfekJcdA8oJ08g (ECDSA) SSH host key: SHA256:27DLfwH9PvUCk/yT+kv2Xo9amCgFpHldnvJ7U9agSZM (RSA) SSH host key: SHA256:3mVwV/L6+anvTNFv4/0Nqq9e6VEQkONK9BadsBof9/g (ED25519) eth0: 172.31.21.193 fe80::4cd:10ff:fee7:ef29 ip-172-31-21-193 login: [ 107.224284] audit: type=1400 audit(1757118170.807:1398): avc: denied { perfmon } for pid=5172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 107.228182] audit: type=1300 audit(1757118170.807:1398): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f94a040d5a8 items=0 ppid=4474 pid=5172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.234936] audit: type=1327 audit(1757118170.807:1398): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036346465316361323061643735656338386630323563353139303831 [ 107.240910] audit: type=1400 audit(1757118170.807:1399): avc: denied { bpf } for pid=5172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.819470] kauditd_printk_skb: 104 callbacks suppressed [ 110.819473] audit: type=1400 audit(1757118174.403:1435): avc: denied { bpf } for pid=5228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.830231] audit: type=1400 audit(1757118174.403:1435): avc: denied { bpf } for pid=5228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.837185] audit: type=1400 audit(1757118174.403:1435): avc: denied { perfmon } for pid=5228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.843802] audit: type=1400 audit(1757118174.403:1435): avc: denied { perfmon } for pid=5228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.851069] audit: type=1400 audit(1757118174.403:1435): avc: denied { perfmon } for pid=5228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.859063] audit: type=1400 audit(1757118174.403:1435): avc: denied { perfmon } for pid=5228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.866653] audit: type=1400 audit(1757118174.403:1435): avc: denied { perfmon } for pid=5228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.874580] audit: type=1400 audit(1757118174.403:1435): avc: denied { bpf } for pid=5228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.882040] audit: type=1400 audit(1757118174.403:1435): avc: denied { bpf } for pid=5228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 110.894523] audit: type=1334 audit(1757118174.403:1435): prog-id=223 op=LOAD [ 116.011546] kauditd_printk_skb: 106 callbacks suppressed [ 116.011549] audit: type=1400 audit(1757118179.595:1471): avc: denied { watch } for pid=5281 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_22_30.1592194063/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c666,c890 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c666,c890 tclass=file permissive=0 [ 116.023317] audit: type=1300 audit(1757118179.595:1471): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008337e0 a2=fc6 a3=0 items=0 ppid=4891 pid=5281 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c666,c890 key=(null) [ 116.032268] audit: type=1327 audit(1757118179.595:1471): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 118.160339] audit: type=1106 audit(1757118181.742:1472): pid=5345 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 118.174102] audit: type=1104 audit(1757118181.742:1473): pid=5345 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 118.189330] audit: type=1131 audit(1757118181.772:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.193:22-139.178.68.195:52608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 120.342227] audit: type=1400 audit(1757118183.925:1475): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 120.347611] audit: type=1400 audit(1757118183.925:1476): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 120.353558] audit: type=1400 audit(1757118183.925:1477): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 120.360111] audit: type=1400 audit(1757118183.925:1478): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.212753] kauditd_printk_skb: 110 callbacks suppressed [ 121.212756] audit: type=1325 audit(1757118184.796:1511): table=filter:127 family=2 entries=12 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.218163] audit: type=1300 audit(1757118184.796:1511): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffebcd7fbe0 a2=0 a3=7ffebcd7fbcc items=0 ppid=2749 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.225777] audit: type=1327 audit(1757118184.796:1511): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 121.231737] audit: type=1325 audit(1757118184.815:1512): table=nat:128 family=2 entries=22 op=nft_register_rule pid=5830 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.235574] audit: type=1300 audit(1757118184.815:1512): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffebcd7fbe0 a2=0 a3=7ffebcd7fbcc items=0 ppid=2749 pid=5830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.243482] audit: type=1327 audit(1757118184.815:1512): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.518055] audit: type=1400 audit(1757118186.101:1513): avc: denied { perfmon } for pid=5839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 122.526538] audit: type=1300 audit(1757118186.101:1513): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f2ceda9d908 items=0 ppid=4474 pid=5839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.537919] audit: type=1327 audit(1757118186.101:1513): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838353332663333626531396161663265313565386131666133633035 [ 122.548609] audit: type=1400 audit(1757118186.109:1514): avc: denied { bpf } for pid=5839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 130.486488] kauditd_printk_skb: 81 callbacks suppressed [ 130.486491] audit: type=1130 audit(1757118194.070:1549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.193:22-139.178.68.195:41922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 130.748368] audit: type=1101 audit(1757118194.331:1550): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 130.756483] audit: type=1103 audit(1757118194.339:1551): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 130.764909] audit: type=1006 audit(1757118194.339:1552): pid=5913 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 130.772811] audit: type=1300 audit(1757118194.339:1552): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff055520d0 a2=3 a3=0 items=0 ppid=1 pid=5913 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.782932] audit: type=1327 audit(1757118194.339:1552): proctitle=737368643A20636F7265205B707269765D [ 130.797664] audit: type=1105 audit(1757118194.380:1553): pid=5913 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 130.807803] audit: type=1103 audit(1757118194.390:1554): pid=5915 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 131.142099] audit: type=1106 audit(1757118194.725:1555): pid=5913 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 131.150790] audit: type=1104 audit(1757118194.725:1556): pid=5913 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.168953] kauditd_printk_skb: 1 callbacks suppressed [ 136.168956] audit: type=1130 audit(1757118199.752:1558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.193:22-139.178.68.195:41936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.425942] audit: type=1101 audit(1757118200.009:1559): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.434283] audit: type=1103 audit(1757118200.017:1560): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.440931] audit: type=1006 audit(1757118200.017:1561): pid=5947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 136.444804] audit: type=1300 audit(1757118200.017:1561): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbc9fbd50 a2=3 a3=0 items=0 ppid=1 pid=5947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.451792] audit: type=1327 audit(1757118200.017:1561): proctitle=737368643A20636F7265205B707269765D [ 136.465649] audit: type=1105 audit(1757118200.049:1562): pid=5947 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 136.473226] audit: type=1103 audit(1757118200.053:1563): pid=5949 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 137.270402] audit: type=1325 audit(1757118200.853:1564): table=filter:131 family=2 entries=10 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 137.276573] audit: type=1300 audit(1757118200.853:1564): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd7263bdc0 a2=0 a3=7ffd7263bdac items=0 ppid=2749 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.176313] kauditd_printk_skb: 18 callbacks suppressed [ 141.176316] audit: type=1130 audit(1757118204.759:1578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.193:22-139.178.68.195:43878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.391131] audit: type=1101 audit(1757118204.974:1579): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.399385] audit: type=1103 audit(1757118204.975:1580): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.407800] audit: type=1006 audit(1757118204.976:1581): pid=5977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 141.411877] audit: type=1300 audit(1757118204.976:1581): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5e743410 a2=3 a3=0 items=0 ppid=1 pid=5977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.419918] audit: type=1327 audit(1757118204.976:1581): proctitle=737368643A20636F7265205B707269765D [ 141.424587] audit: type=1105 audit(1757118205.008:1582): pid=5977 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 141.432286] audit: type=1103 audit(1757118205.008:1583): pid=5979 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 145.592572] audit: type=1325 audit(1757118209.175:1584): table=filter:133 family=2 entries=22 op=nft_register_rule pid=6015 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 145.596718] audit: type=1300 audit(1757118209.175:1584): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffea80b9600 a2=0 a3=7ffea80b95ec items=0 ppid=2749 pid=6015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.359360] kauditd_printk_skb: 14 callbacks suppressed [ 146.359363] audit: type=1101 audit(1757118209.942:1592): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 146.368220] audit: type=1103 audit(1757118209.943:1593): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 146.375082] audit: type=1006 audit(1757118209.943:1594): pid=6019 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 146.379136] audit: type=1300 audit(1757118209.943:1594): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe78523860 a2=3 a3=0 items=0 ppid=1 pid=6019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.386291] audit: type=1327 audit(1757118209.943:1594): proctitle=737368643A20636F7265205B707269765D [ 146.595972] audit: type=1105 audit(1757118210.179:1595): pid=6019 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 146.628401] audit: type=1103 audit(1757118210.193:1596): pid=6022 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 155.750173] audit: type=1325 audit(1757118219.333:1597): table=filter:137 family=2 entries=22 op=nft_register_rule pid=6070 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.754245] audit: type=1300 audit(1757118219.333:1597): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffebb661500 a2=0 a3=7ffebb6614ec items=0 ppid=2749 pid=6070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.762409] audit: type=1327 audit(1757118219.333:1597): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 155.772243] audit: type=1325 audit(1757118219.354:1598): table=nat:138 family=2 entries=108 op=nft_register_chain pid=6070 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.776584] audit: type=1300 audit(1757118219.354:1598): arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffebb661500 a2=0 a3=7ffebb6614ec items=0 ppid=2749 pid=6070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.785672] audit: type=1327 audit(1757118219.354:1598): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 159.748995] audit: type=1106 audit(1757118223.332:1599): pid=6019 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.763455] audit: type=1104 audit(1757118223.345:1600): pid=6019 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 159.778709] audit: type=1130 audit(1757118223.355:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.193:22-139.178.68.195:34646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.793322] audit: type=1131 audit(1757118223.361:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.193:22-139.178.68.195:43888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.872193] kauditd_printk_skb: 7 callbacks suppressed [ 167.872196] audit: type=1400 audit(1757118231.455:1608): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520969 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 167.887805] audit: type=1300 audit(1757118231.455:1608): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001980260 a2=fc6 a3=0 items=0 ppid=2336 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 key=(null) [ 167.921224] audit: type=1327 audit(1757118231.455:1608): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 167.941853] audit: type=1400 audit(1757118231.457:1609): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 167.959549] audit: type=1300 audit(1757118231.457:1609): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001cb2de0 a2=fc6 a3=0 items=0 ppid=2336 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 key=(null) [ 167.971462] audit: type=1327 audit(1757118231.457:1609): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 169.742819] audit: type=1400 audit(1757118233.326:1610): avc: denied { watch } for pid=2497 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520977 scontext=system_u:system_r:svirt_lxc_net_t:s0:c703,c1004 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 169.752826] audit: type=1300 audit(1757118233.326:1610): arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c011a0e570 a2=fc6 a3=0 items=0 ppid=2366 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c703,c1004 key=(null) [ 169.763777] audit: type=1327 audit(1757118233.326:1610): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E313933002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 169.781470] audit: type=1400 audit(1757118233.331:1611): avc: denied { watch } for pid=2497 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c703,c1004 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 173.484962] kauditd_printk_skb: 23 callbacks suppressed [ 173.484965] audit: type=1400 audit(1757118237.068:1621): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520969 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 173.492592] audit: type=1300 audit(1757118237.068:1621): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002734800 a2=fc6 a3=0 items=0 ppid=2336 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 key=(null) [ 173.500537] audit: type=1327 audit(1757118237.068:1621): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 173.507513] audit: type=1400 audit(1757118237.076:1622): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520969 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 173.513648] audit: type=1300 audit(1757118237.076:1622): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002734820 a2=fc6 a3=0 items=0 ppid=2336 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 key=(null) [ 173.521227] audit: type=1327 audit(1757118237.076:1622): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 173.528571] audit: type=1400 audit(1757118237.076:1623): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520969 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 173.534489] audit: type=1300 audit(1757118237.076:1623): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002734840 a2=fc6 a3=0 items=0 ppid=2336 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 key=(null) [ 173.542238] audit: type=1327 audit(1757118237.076:1623): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 173.549203] audit: type=1400 audit(1757118237.083:1624): avc: denied { watch } for pid=2479 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520969 scontext=system_u:system_r:svirt_lxc_net_t:s0:c518,c948 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 182.242124] kauditd_printk_skb: 13 callbacks suppressed [ 182.242127] audit: type=1106 audit(1757118245.825:1632): pid=6149 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.263609] audit: type=1104 audit(1757118245.825:1633): pid=6149 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 182.280433] audit: type=1131 audit(1757118245.857:1634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.193:22-139.178.68.195:55954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.801190] audit: type=1400 audit(1757118247.384:1635): avc: denied { watch } for pid=5790 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_22_31.900774415/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c122,c273 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c122,c273 tclass=file permissive=0 [ 183.809264] audit: type=1300 audit(1757118247.384:1635): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023ef460 a2=fc6 a3=0 items=0 ppid=5043 pid=5790 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c122,c273 key=(null) [ 183.818258] audit: type=1327 audit(1757118247.384:1635): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 187.244465] audit: type=1130 audit(1757118250.828:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.193:22-139.178.68.195:43476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.545277] audit: type=1101 audit(1757118251.128:1637): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.556590] audit: type=1103 audit(1757118251.138:1638): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.575310] audit: type=1006 audit(1757118251.138:1639): pid=6195 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 187.583303] audit: type=1300 audit(1757118251.138:1639): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4e441ba0 a2=3 a3=0 items=0 ppid=1 pid=6195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.597061] audit: type=1327 audit(1757118251.138:1639): proctitle=737368643A20636F7265205B707269765D [ 187.634304] audit: type=1105 audit(1757118251.217:1640): pid=6195 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 187.649207] audit: type=1103 audit(1757118251.218:1641): pid=6197 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.125823] audit: type=1106 audit(1757118252.709:1642): pid=6195 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.140315] audit: type=1104 audit(1757118252.710:1643): pid=6195 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 202.920376] kauditd_printk_skb: 1 callbacks suppressed [ 202.920379] audit: type=1334 audit(1757118266.504:1645): prog-id=123 op=UNLOAD [ 202.926828] audit: type=1334 audit(1757118266.510:1646): prog-id=126 op=UNLOAD [ 203.577517] audit: type=1400 audit(1757118267.161:1647): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 203.582667] audit: type=1400 audit(1757118267.161:1648): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 203.588044] audit: type=1400 audit(1757118267.161:1649): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 203.593120] audit: type=1400 audit(1757118267.161:1650): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0