ny extents [ 4.459049] BTRFS info (device nvme0n1p6): enabling ssd optimizations [ 4.659634] BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1150) [ 4.662386] BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm [ 4.664142] BTRFS info (device nvme0n1p6): using free space tree [ 4.665607] BTRFS info (device nvme0n1p6): has skinny extents [ 4.689443] BTRFS info (device nvme0n1p6): enabling ssd optimizations [ 5.770702] kauditd_printk_skb: 24 callbacks suppressed [ 5.770705] audit: type=1130 audit(1757118259.780:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.784770] audit: type=1130 audit(1757118259.794:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.784791] audit: type=1131 audit(1757118259.794:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.796680] audit: type=1130 audit(1757118259.805:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.822232] audit: type=1130 audit(1757118259.831:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.822253] audit: type=1131 audit(1757118259.831:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.857312] audit: type=1130 audit(1757118259.866:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.879011] audit: type=1130 audit(1757118259.888:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.879035] audit: type=1131 audit(1757118259.888:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 5.894882] audit: type=1131 audit(1757118259.904:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 6.150698] systemd-journald[185]: Received SIGTERM from PID 1 (systemd). [ 7.180767] SELinux: Class mctp_socket not defined in policy. [ 7.182124] SELinux: Class anon_inode not defined in policy. [ 7.183428] SELinux: the above unknown classes and permissions will be allowed [ 7.186716] SELinux: policy capability network_peer_controls=1 [ 7.188046] SELinux: policy capability open_perms=1 [ 7.189248] SELinux: policy capability extended_socket_class=1 [ 7.190565] SELinux: policy capability always_check_network=0 [ 7.191885] SELinux: policy capability cgroup_seclabel=1 [ 7.193122] SELinux: policy capability nnp_nosuid_transition=1 [ 7.194393] SELinux: policy capability genfs_seclabel_symlinks=0 [ 7.195705] SELinux: policy capability ioctl_skip_cloexec=0 [ 7.219736] systemd[1]: Successfully loaded SELinux policy in 119.852ms. [ 7.343512] systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.886ms. [ 7.358499] systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) [ 7.365090] systemd[1]: Detected virtualization amazon. [ 7.366492] systemd[1]: Detected architecture x86-64. [ 7.367793] systemd[1]: Detected first boot. [ 7.393178] systemd[1]: Initializing machine ID from VM UUID. [ 7.628680] SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). [ 11.340429] systemd[1]: Populated /etc with preset unit settings. [ 11.528664] systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. [ 11.531889] systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. [ 11.579207] systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. [ 11.605730] systemd[1]: Queued start job for default target multi-user.target. [ 11.607387] systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. [ 11.617183] systemd[1]: Created slice system-addon\x2dconfig.slice. [ 11.620432] systemd[1]: Created slice system-addon\x2drun.slice. [ 11.623140] systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. [ 11.626022] systemd[1]: Created slice system-getty.slice. [ 11.628589] systemd[1]: Created slice system-modprobe.slice. [ 11.631172] systemd[1]: Created slice system-serial\x2dgetty.slice. [ 11.633855] systemd[1]: Created slice system-system\x2dcloudinit.slice. [ 11.636578] systemd[1]: Created slice system-systemd\x2dfsck.slice. [ 11.639165] systemd[1]: Created slice user.slice. [ 11.641159] systemd[1]: Started systemd-ask-password-console.path. [ 11.643376] systemd[1]: Started systemd-ask-password-wall.path. [ 11.645897] systemd[1]: Set up automount boot.automount. [ 11.647992] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. [ 11.650259] systemd[1]: Reached target integritysetup.target. [ 11.652337] systemd[1]: Reached target remote-cryptsetup.target. [ 11.654381] systemd[1]: Reached target remote-fs.target. [ 11.656247] systemd[1]: Reached target slices.target. [ 11.658121] systemd[1]: Reached target swap.target. [ 11.659915] systemd[1]: Reached target torcx.target. [ 11.661764] systemd[1]: Reached target veritysetup.target. [ 11.665509] systemd[1]: Listening on systemd-coredump.socket. [ 11.667611] systemd[1]: Listening on systemd-initctl.socket. [ 11.670123] kauditd_printk_skb: 46 callbacks suppressed [ 11.670125] audit: type=1400 audit(1757118265.679:84): avc: denied { audit_read } for pid=1 comm="systemd" capability=37 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 11.670149] systemd[1]: Listening on systemd-journald-audit.socket. [ 11.671810] audit: type=1335 audit(1757118265.679:85): pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 [ 11.684490] systemd[1]: Listening on systemd-journald-dev-log.socket. [ 11.686978] systemd[1]: Listening on systemd-journald.socket. [ 11.689182] systemd[1]: Listening on systemd-networkd.socket. [ 11.691408] systemd[1]: Listening on systemd-udevd-control.socket. [ 11.693649] systemd[1]: Listening on systemd-udevd-kernel.socket. [ 11.695888] systemd[1]: Listening on systemd-userdbd.socket. [ 11.699248] systemd[1]: Mounting dev-hugepages.mount... [ 11.704079] systemd[1]: Mounting dev-mqueue.mount... [ 11.709327] systemd[1]: Mounting media.mount... [ 11.712235] systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 11.718068] systemd[1]: Mounting sys-kernel-debug.mount... [ 11.722857] systemd[1]: Mounting sys-kernel-tracing.mount... [ 11.733062] systemd[1]: Mounting tmp.mount... [ 11.737899] systemd[1]: Starting flatcar-tmpfiles.service... [ 11.741493] systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. [ 11.753246] systemd[1]: Starting kmod-static-nodes.service... [ 11.756977] systemd[1]: Starting modprobe@configfs.service... [ 11.760708] systemd[1]: Starting modprobe@dm_mod.service... [ 11.764546] systemd[1]: Starting modprobe@drm.service... [ 11.769559] systemd[1]: Starting modprobe@efi_pstore.service... [ 11.778501] systemd[1]: Starting modprobe@fuse.service... [ 11.789042] systemd[1]: Starting modprobe@loop.service... [ 11.794113] systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 11.800363] systemd[1]: systemd-journald.service: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling. [ 11.804871] systemd[1]: (This warning is only shown for the first unit using IP firewalling.) [ 11.809495] systemd[1]: Starting systemd-journald.service... [ 11.818561] systemd[1]: Starting systemd-modules-load.service... [ 11.825319] systemd[1]: Starting systemd-network-generator.service... [ 11.831584] systemd[1]: Starting systemd-remount-fs.service... [ 11.852955] systemd[1]: Starting systemd-udev-trigger.service... [ 11.856234] systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 11.859952] audit: type=1305 audit(1757118265.865:86): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 [ 11.863464] systemd[1]: Mounted dev-hugepages.mount. [ 11.865812] audit: type=1300 audit(1757118265.865:86): arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffd42d83fb0 a2=4000 a3=7ffd42d8404c items=0 ppid=1 pid=1357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) [ 11.877691] systemd[1]: Mounted dev-mqueue.mount. [ 11.881013] systemd[1]: Mounted media.mount. [ 11.882548] audit: type=1327 audit(1757118265.865:86): proctitle="/usr/lib/systemd/systemd-journald" [ 11.888030] systemd[1]: Mounted sys-kernel-debug.mount. [ 11.891612] systemd[1]: Mounted sys-kernel-tracing.mount. [ 11.897796] systemd[1]: Started systemd-journald.service. [ 11.904681] audit: type=1130 audit(1757118265.914:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.920656] audit: type=1130 audit(1757118265.924:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.920662] audit: type=1130 audit(1757118265.926:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.920665] audit: type=1131 audit(1757118265.927:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.923879] loop: module loaded [ 11.948556] audit: type=1130 audit(1757118265.954:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 11.965929] fuse: init (API version 7.34) [ 12.008916] systemd-journald[1357]: Received client request to flush runtime journal. [ 12.895089] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 12.911081] ACPI: button: Power Button [PWRF] [ 12.912233] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 [ 12.914341] ACPI: button: Sleep Button [SLPF] [ 12.929661] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 12.966421] input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 [ 12.976592] mousedev: PS/2 mouse device common for all mice [ 12.990505] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 13.258511] loop0: detected capacity change from 0 to 221472 [ 13.395811] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 13.420255] loop1: detected capacity change from 0 to 221472 [ 15.139060] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ 15.252752] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 2025/09/06 00:24:31Z: Amazon SSM Agent v2.3.1319.0 is running 2025/09/06 00:24:31Z: OsProductName: Flatcar Container Linux by Kinvolk 2025/09/06 00:24:31Z: OsVersion: 3510.3.8 This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:24:33 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 26.245599] kauditd_printk_skb: 174 callbacks suppressed [ 26.245603] audit: type=1305 audit(1757118281.543:151): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 26.249721] audit: type=1300 audit(1757118281.543:151): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe90e099e0 a2=420 a3=0 items=0 ppid=1 pid=2020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 26.254924] audit: type=1327 audit(1757118281.543:151): proctitle=2F7362696E2F617564697463746C002D44 [ 26.257420] audit: type=1131 audit(1757118281.552:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.285282] audit: type=1130 audit(1757118281.580:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.290466] audit: type=1106 audit(1757118281.581:154): pid=2016 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 26.294367] audit: type=1104 audit(1757118281.581:155): pid=2016 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 26.308891] audit: type=1106 audit(1757118281.606:156): pid=2012 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 26.316237] audit: type=1104 audit(1757118281.606:157): pid=2012 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 26.321148] audit: type=1131 audit(1757118281.608:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.178:22-139.178.68.195:41152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.931406] Initializing XFRM netlink socket This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:24:43 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 39.439550] kauditd_printk_skb: 88 callbacks suppressed [ 39.439554] audit: type=1130 audit(1757118294.735:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.448555] audit: type=1131 audit(1757118294.735:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.879217] audit: type=1130 audit(1757118295.176:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.961017] audit: type=1131 audit(1757118295.258:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 43.536077] audit: type=1130 audit(1757118298.832:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.541546] audit: type=1131 audit(1757118298.832:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.992551] audit: type=1130 audit(1757118299.287:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 44.278705] audit: type=1130 audit(1757118299.576:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.041236] audit: type=1400 audit(1757118300.339:205): avc: denied { mac_admin } for pid=2326 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 45.046438] audit: type=1401 audit(1757118300.339:205): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 45.051930] audit: type=1300 audit(1757118300.339:205): arch=c000003e syscall=188 success=no exit=-22 a0=c000b4daa0 a1=c000991458 a2=c000b4da70 a3=25 items=0 ppid=1 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.063446] audit: type=1327 audit(1757118300.339:205): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 45.073916] audit: type=1400 audit(1757118300.339:206): avc: denied { mac_admin } for pid=2326 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 45.081415] audit: type=1401 audit(1757118300.339:206): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 45.088645] audit: type=1300 audit(1757118300.339:206): arch=c000003e syscall=188 success=no exit=-22 a0=c0000b9020 a1=c000991470 a2=c000b4db30 a3=25 items=0 ppid=1 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 45.100251] audit: type=1327 audit(1757118300.339:206): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 45.110220] audit: type=1325 audit(1757118300.342:207): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 45.115904] audit: type=1300 audit(1757118300.342:207): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffdcd288e0 a2=0 a3=7fffdcd288cc items=0 ppid=2326 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 53.121402] kauditd_printk_skb: 39 callbacks suppressed [ 53.121404] audit: type=1131 audit(1757118308.417:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.636161] audit: type=1130 audit(1757118309.932:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.878199] audit: type=1400 audit(1757118310.172:223): avc: denied { mac_admin } for pid=2693 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 54.883956] audit: type=1401 audit(1757118310.172:223): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 54.891780] audit: type=1300 audit(1757118310.172:223): arch=c000003e syscall=188 success=no exit=-22 a0=c000913b60 a1=c0000388d0 a2=c000913b30 a3=25 items=0 ppid=1 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.905291] audit: type=1327 audit(1757118310.172:223): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 54.917867] audit: type=1400 audit(1757118310.172:224): avc: denied { mac_admin } for pid=2693 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 54.926506] audit: type=1401 audit(1757118310.172:224): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 54.932346] audit: type=1300 audit(1757118310.172:224): arch=c000003e syscall=188 success=no exit=-22 a0=c0008df940 a1=c0000388e8 a2=c000913bf0 a3=25 items=0 ppid=1 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 54.944792] audit: type=1327 audit(1757118310.172:224): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.420276] kauditd_printk_skb: 4 callbacks suppressed [ 61.420279] audit: type=1325 audit(1757118316.716:226): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3159 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.430406] audit: type=1300 audit(1757118316.716:226): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd86798890 a2=0 a3=7ffd8679887c items=0 ppid=2798 pid=3159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.452014] audit: type=1327 audit(1757118316.716:226): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 61.457832] audit: type=1325 audit(1757118316.716:227): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3160 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.463217] audit: type=1300 audit(1757118316.716:227): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4d3cc330 a2=0 a3=7ffe4d3cc31c items=0 ppid=2798 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.479398] audit: type=1327 audit(1757118316.716:227): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 61.485044] audit: type=1325 audit(1757118316.719:228): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3161 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.491346] audit: type=1300 audit(1757118316.719:228): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1ecc6830 a2=0 a3=7ffe1ecc681c items=0 ppid=2798 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.499615] audit: type=1327 audit(1757118316.719:228): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 61.504926] audit: type=1325 audit(1757118316.727:229): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 69.968984] kauditd_printk_skb: 143 callbacks suppressed [ 69.968987] audit: type=1106 audit(1757118325.265:277): pid=2049 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 69.985977] audit: type=1104 audit(1757118325.276:278): pid=2049 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 70.028170] audit: type=1106 audit(1757118325.323:279): pid=2045 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 70.052770] audit: type=1104 audit(1757118325.324:280): pid=2045 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 70.063630] audit: type=1131 audit(1757118325.344:281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.178:22-139.178.68.195:41154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.254755] audit: type=1325 audit(1757118326.550:282): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 71.261216] audit: type=1300 audit(1757118326.550:282): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff3d4236e0 a2=0 a3=7fff3d4236cc items=0 ppid=2798 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.272721] audit: type=1327 audit(1757118326.550:282): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 71.280620] audit: type=1325 audit(1757118326.571:283): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 71.287929] audit: type=1300 audit(1757118326.571:283): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff3d4236e0 a2=0 a3=0 items=0 ppid=2798 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.970935] kauditd_printk_skb: 19 callbacks suppressed [ 74.970938] audit: type=1325 audit(1757118330.265:290): table=filter:97 family=2 entries=20 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 74.984718] audit: type=1300 audit(1757118330.265:290): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffffd37b350 a2=0 a3=7ffffd37b33c items=0 ppid=2798 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.998719] audit: type=1327 audit(1757118330.265:290): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 75.004585] audit: type=1325 audit(1757118330.293:291): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 75.012632] audit: type=1300 audit(1757118330.293:291): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffffd37b350 a2=0 a3=0 items=0 ppid=2798 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.031947] audit: type=1327 audit(1757118330.293:291): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 95.019529] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 95.021500] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 96.577909] audit: type=1400 audit(1757118351.873:292): avc: denied { write } for pid=4235 comm="tee" name="fd" dev="proc" ino=25916 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 96.583978] audit: type=1300 audit(1757118351.873:292): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc36b017d7 a2=241 a3=1b6 items=1 ppid=4210 pid=4235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.604901] audit: type=1307 audit(1757118351.873:292): cwd="/etc/service/enabled/confd/log" [ 96.612145] audit: type=1302 audit(1757118351.873:292): item=0 name="/dev/fd/63" inode=25325 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 96.629867] audit: type=1327 audit(1757118351.873:292): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 96.645857] audit: type=1400 audit(1757118351.890:293): avc: denied { write } for pid=4246 comm="tee" name="fd" dev="proc" ino=25934 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 96.653818] audit: type=1300 audit(1757118351.890:293): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff314a57d7 a2=241 a3=1b6 items=1 ppid=4207 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.661284] audit: type=1307 audit(1757118351.890:293): cwd="/etc/service/enabled/felix/log" [ 96.663384] audit: type=1302 audit(1757118351.890:293): item=0 name="/dev/fd/63" inode=25909 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 96.670852] audit: type=1327 audit(1757118351.890:293): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 98.797711] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 98.801198] IPv6: ADDRCONF(NETDEV_CHANGE): calia0c90b3d939: link becomes ready [ 99.775343] IPv6: ADDRCONF(NETDEV_CHANGE): cali84aa560bf93: link becomes ready [ 99.879496] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 99.881978] IPv6: ADDRCONF(NETDEV_CHANGE): cali702c7d92492: link becomes ready [ 100.089162] IPv6: ADDRCONF(NETDEV_CHANGE): calidd1e17d8f2a: link becomes ready This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:25:56 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 101.456321] IPv6: ADDRCONF(NETDEV_CHANGE): cali2d7e0b288be: link becomes ready [ 101.671251] kauditd_printk_skb: 577 callbacks suppressed [ 101.671255] audit: type=1325 audit(1757118356.965:413): table=filter:109 family=2 entries=48 op=nft_register_chain pid=4996 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 101.678326] audit: type=1300 audit(1757118356.965:413): arch=c000003e syscall=46 success=yes exit=23140 a0=3 a1=7ffc11e8c820 a2=0 a3=7ffc11e8c80c items=0 ppid=4404 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.691824] audit: type=1327 audit(1757118356.965:413): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:25:57 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 102.373065] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 102.374516] IPv6: ADDRCONF(NETDEV_CHANGE): cali79d3d29515c: link becomes ready [ 102.509978] IPv6: ADDRCONF(NETDEV_CHANGE): cali98950d61521: link becomes ready [ 102.551719] audit: type=1106 audit(1757118357.846:414): pid=4865 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 102.562169] audit: type=1104 audit(1757118357.853:415): pid=4865 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 102.575995] audit: type=1131 audit(1757118357.855:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.178:22-139.178.68.195:54366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 102.716984] audit: type=1325 audit(1757118357.997:417): table=filter:110 family=2 entries=72 op=nft_register_chain pid=5105 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 102.720226] audit: type=1300 audit(1757118357.997:417): arch=c000003e syscall=46 success=yes exit=35812 a0=3 a1=7ffcc979e6c0 a2=0 a3=7ffcc979e6ac items=0 ppid=4404 pid=5105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.733889] audit: type=1327 audit(1757118357.997:417): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 102.818873] audit: type=1325 audit(1757118358.109:418): table=filter:111 family=2 entries=53 op=nft_register_chain pid=5174 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 103.239409] IPv6: ADDRCONF(NETDEV_CHANGE): calia3d15d4fec3: link becomes ready This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:25:58 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:25:59 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:26:00 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:26:01 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 107.596428] kauditd_printk_skb: 17 callbacks suppressed [ 107.596430] audit: type=1130 audit(1757118362.891:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.178:22-139.178.68.195:46280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 108.087026] audit: type=1101 audit(1757118363.382:425): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 108.117001] audit: type=1103 audit(1757118363.412:426): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 108.141750] audit: type=1006 audit(1757118363.429:427): pid=5321 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 108.169710] audit: type=1300 audit(1757118363.429:427): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd40994d70 a2=3 a3=0 items=0 ppid=1 pid=5321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 108.211985] audit: type=1327 audit(1757118363.429:427): proctitle=737368643A20636F7265205B707269765D [ 108.290661] audit: type=1105 audit(1757118363.585:428): pid=5321 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 108.311571] audit: type=1103 audit(1757118363.606:429): pid=5324 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 110.257002] audit: type=1106 audit(1757118365.552:430): pid=5321 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 110.267825] audit: type=1104 audit(1757118365.552:431): pid=5321 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 115.288966] kauditd_printk_skb: 7 callbacks suppressed [ 115.288970] audit: type=1130 audit(1757118370.584:435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.178:22-139.178.68.195:47316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 115.607526] audit: type=1101 audit(1757118370.902:436): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 115.620269] audit: type=1103 audit(1757118370.914:437): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 115.631719] audit: type=1006 audit(1757118370.915:438): pid=5581 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 115.639135] audit: type=1300 audit(1757118370.915:438): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9a77e8c0 a2=3 a3=0 items=0 ppid=1 pid=5581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.670473] audit: type=1327 audit(1757118370.915:438): proctitle=737368643A20636F7265205B707269765D [ 115.682761] audit: type=1105 audit(1757118370.971:439): pid=5581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 115.696786] audit: type=1103 audit(1757118370.975:440): pid=5586 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 118.078119] audit: type=1106 audit(1757118373.372:441): pid=5581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 118.088784] audit: type=1104 audit(1757118373.373:442): pid=5581 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 120.931443] kauditd_printk_skb: 32 callbacks suppressed [ 120.931446] audit: type=1325 audit(1757118376.227:463): table=filter:123 family=2 entries=13 op=nft_register_rule pid=5711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 120.937604] audit: type=1300 audit(1757118376.227:463): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe13d042f0 a2=0 a3=7ffe13d042dc items=0 ppid=2798 pid=5711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.950067] audit: type=1327 audit(1757118376.227:463): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 120.956147] audit: type=1325 audit(1757118376.246:464): table=nat:124 family=2 entries=27 op=nft_register_chain pid=5711 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 120.962124] audit: type=1300 audit(1757118376.246:464): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe13d042f0 a2=0 a3=7ffe13d042dc items=0 ppid=2798 pid=5711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.974953] audit: type=1327 audit(1757118376.246:464): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 125.426152] audit: type=1106 audit(1757118380.722:465): pid=5676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 125.434333] audit: type=1104 audit(1757118380.723:466): pid=5676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 125.457620] audit: type=1131 audit(1757118380.754:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.178:22-139.178.68.195:47338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 126.429291] audit: type=1325 audit(1757118381.725:468): table=filter:125 family=2 entries=11 op=nft_register_rule pid=5919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.433930] audit: type=1300 audit(1757118381.725:468): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffcfa8be990 a2=0 a3=7ffcfa8be97c items=0 ppid=2798 pid=5919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.444937] audit: type=1327 audit(1757118381.725:468): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 126.455294] audit: type=1325 audit(1757118381.751:469): table=nat:126 family=2 entries=29 op=nft_register_chain pid=5919 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 126.461971] audit: type=1300 audit(1757118381.751:469): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffcfa8be990 a2=0 a3=7ffcfa8be97c items=0 ppid=2798 pid=5919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.474590] audit: type=1327 audit(1757118381.751:469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 127.401600] audit: type=1325 audit(1757118382.697:470): table=filter:127 family=2 entries=75 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 127.410414] audit: type=1300 audit(1757118382.697:470): arch=c000003e syscall=46 success=yes exit=9336 a0=3 a1=7ffea9314ee0 a2=0 a3=7ffea9314ecc items=0 ppid=4404 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.423171] audit: type=1327 audit(1757118382.697:470): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 127.427443] audit: type=1325 audit(1757118382.698:471): table=filter:128 family=2 entries=8 op=nft_unregister_chain pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" This is ip-172-31-22-178 (Linux x86_64 5.15.190-flatcar) 00:26:22 SSH host key: SHA256:mt5sayyNzv/X6ihsTGm143Kteyl6B0d4NkRrHnU2zz8 (ECDSA) SSH host key: SHA256:ryQ/nN53qU70ETxRgyVAJafXYx89sZYX/hp49nY8jNQ (RSA) SSH host key: SHA256:H/NH9slqg5B/WR+INGXOCXrMBomCYslGK15HuN7WJnc (ED25519) eth0: 172.31.22.178 fe80::4ed:77ff:fecf:305 ip-172-31-22-178 login: [ 133.581518] kauditd_printk_skb: 16 callbacks suppressed [ 133.581520] audit: type=1106 audit(1757118388.878:480): pid=6186 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.590822] audit: type=1104 audit(1757118388.880:481): pid=6186 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.620789] audit: type=1130 audit(1757118388.917:482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.178:22-139.178.68.195:41504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.633174] audit: type=1131 audit(1757118388.923:483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.178:22-139.178.68.195:41498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 133.888124] audit: type=1101 audit(1757118389.184:484): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.895086] audit: type=1103 audit(1757118389.191:485): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 133.902611] audit: type=1006 audit(1757118389.191:486): pid=6294 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 133.907197] audit: type=1300 audit(1757118389.191:486): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe67eda9f0 a2=3 a3=0 items=0 ppid=1 pid=6294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.917182] audit: type=1327 audit(1757118389.191:486): proctitle=737368643A20636F7265205B707269765D [ 133.929978] audit: type=1105 audit(1757118389.226:487): pid=6294 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 144.876669] kauditd_printk_skb: 18 callbacks suppressed [ 144.876672] audit: type=1325 audit(1757118400.172:500): table=filter:133 family=2 entries=22 op=nft_register_rule pid=6354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.883215] audit: type=1300 audit(1757118400.172:500): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffe7fd28550 a2=0 a3=7ffe7fd2853c items=0 ppid=2798 pid=6354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.896915] audit: type=1327 audit(1757118400.172:500): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 144.900946] audit: type=1325 audit(1757118400.192:501): table=nat:134 family=2 entries=24 op=nft_register_rule pid=6354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 144.907240] audit: type=1300 audit(1757118400.192:501): arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffe7fd28550 a2=0 a3=0 items=0 ppid=2798 pid=6354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.916844] audit: type=1327 audit(1757118400.192:501): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 146.245446] audit: type=1325 audit(1757118401.541:502): table=filter:135 family=2 entries=34 op=nft_register_rule pid=6356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 146.249531] audit: type=1300 audit(1757118401.541:502): arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc4db80b50 a2=0 a3=7ffc4db80b3c items=0 ppid=2798 pid=6356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.257358] audit: type=1327 audit(1757118401.541:502): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 146.264019] audit: type=1325 audit(1757118401.559:503): table=nat:136 family=2 entries=24 op=nft_register_rule pid=6356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.010550] kauditd_printk_skb: 13 callbacks suppressed [ 155.010554] audit: type=1325 audit(1757118410.306:513): table=filter:137 family=2 entries=22 op=nft_register_rule pid=6413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.016138] audit: type=1300 audit(1757118410.306:513): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffee9e90a30 a2=0 a3=7ffee9e90a1c items=0 ppid=2798 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.023726] audit: type=1327 audit(1757118410.306:513): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 155.031386] audit: type=1325 audit(1757118410.327:514): table=nat:138 family=2 entries=108 op=nft_register_chain pid=6413 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.035746] audit: type=1300 audit(1757118410.327:514): arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffee9e90a30 a2=0 a3=7ffee9e90a1c items=0 ppid=2798 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.043827] audit: type=1327 audit(1757118410.327:514): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 163.225612] audit: type=1106 audit(1757118418.522:515): pid=6357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 163.260148] audit: type=1104 audit(1757118418.536:516): pid=6357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 163.270550] audit: type=1130 audit(1757118418.540:517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.178:22-139.178.68.195:44288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.281493] audit: type=1131 audit(1757118418.541:518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.178:22-139.178.68.195:54244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.558850] audit: type=1101 audit(1757118418.856:519): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 163.577896] audit: type=1103 audit(1757118418.871:520): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 163.602988] audit: type=1006 audit(1757118418.871:521): pid=6418 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 163.616493] audit: type=1300 audit(1757118418.871:521): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc234986c0 a2=3 a3=0 items=0 ppid=1 pid=6418 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.628903] audit: type=1327 audit(1757118418.871:521): proctitle=737368643A20636F7265205B707269765D [ 163.660703] audit: type=1105 audit(1757118418.957:522): pid=6418 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.969774] kauditd_printk_skb: 1 callbacks suppressed [ 175.969795] audit: type=1106 audit(1757118431.267:524): pid=6418 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 175.983495] audit: type=1104 audit(1757118431.278:525): pid=6418 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 176.010640] audit: type=1131 audit(1757118431.307:526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.178:22-139.178.68.195:44288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.625634] audit: type=1325 audit(1757118432.920:527): table=filter:139 family=2 entries=9 op=nft_register_rule pid=6517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.631043] audit: type=1300 audit(1757118432.920:527): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdd43aee30 a2=0 a3=7ffdd43aee1c items=0 ppid=2798 pid=6517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.639937] audit: type=1327 audit(1757118432.920:527): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.651449] audit: type=1325 audit(1757118432.948:528): table=nat:140 family=2 entries=67 op=nft_register_chain pid=6517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.656735] audit: type=1300 audit(1757118432.948:528): arch=c000003e syscall=46 success=yes exit=24796 a0=3 a1=7ffdd43aee30 a2=0 a3=7ffdd43aee1c items=0 ppid=2798 pid=6517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.667913] audit: type=1327 audit(1757118432.948:528): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.786888] audit: type=1325 audit(1757118433.084:529): table=filter:141 family=2 entries=8 op=nft_register_rule pid=6519 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.157312] kauditd_printk_skb: 5 callbacks suppressed [ 181.157315] audit: type=1130 audit(1757118436.454:531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.178:22-139.178.68.195:46024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.585518] audit: type=1101 audit(1757118436.881:532): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 181.596524] audit: type=1103 audit(1757118436.893:533): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 181.606846] audit: type=1006 audit(1757118436.893:534): pid=6520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 181.616668] audit: type=1300 audit(1757118436.893:534): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0bab38a0 a2=3 a3=0 items=0 ppid=1 pid=6520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.629272] audit: type=1327 audit(1757118436.893:534): proctitle=737368643A20636F7265205B707269765D [ 181.966545] audit: type=1105 audit(1757118437.264:535): pid=6520 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 181.978335] audit: type=1103 audit(1757118437.275:536): pid=6525 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.181809] audit: type=1106 audit(1757118444.479:537): pid=6520 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.192695] audit: type=1104 audit(1757118444.487:538): pid=6520 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' [ 189.223287] audit: type=1131 audit(1757118444.519:539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.178:22-139.178.68.195:46024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'