tore.service. Starting modprobe@dm_mod.service... Starting modprobe@efi_pstore.service... [ OK ] Finished modprobe@loop.service. [ OK ] Finished modprobe@efi_pstore.service. Starting modprobe@drm.service... Starting modprobe@loop.service... [ OK ] Finished modprobe@dm_mod.service. [ OK ] Finished systemd-journal-catalog-update.service. [ OK ] Finished modprobe@drm.service. [ OK ] Finished ensure-sysext.service. [ OK ] Finished modprobe@loop.service. [ OK ] Started systemd-timesyncd.service. [ OK ] Finished audit-rules.service. [ OK ] Reached target time-set.target. [ OK ] Started systemd-resolved.service. [ OK ] Reached target network.target. [ OK ] Reached target network-online.target. [ OK ] Reached target nss-lookup.target. [ OK ] Finished ldconfig.service. Starting systemd-update-done.service... [ OK ] Finished systemd-update-done.service. [ OK ] Reached target sysinit.target. [ OK ] Started motdgen.path. [ OK ] Started user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Started logrotate.timer. [ OK ] Started mdadm.timer. [ OK ] Started systemd-tmpfiles-clean.timer. [ OK ] Reached target paths.target. [ OK ] Reached target timers.target. [ OK ] Listening on dbus.socket. Starting docker.socket... [ OK ] Listening on sshd.socket. [ OK ] Listening on docker.socket. [ OK ] Reached target sockets.target. [ OK ] Reached target basic.target. [ OK ] Started amazon-ssm-agent.service. Starting containerd.service... Starting coreos-metadata-sshkeys@core.service... Starting dbus.service... Starting enable-oem-cloudinit.service... Starting extend-filesystems.service... Starting kubelet.service... Starting motdgen.service... [ OK ] Started nvidia.service. Starting prepare-helm.service... Starting ssh-key-proc-cmdline.service... Starting sshd-keygen.service... Starting systemd-logind.service... Starting update-engine.service... Starting update-ssh-keys-after-ignition.service... [ OK ] Finished ssh-key-proc-cmdline.service. [ OK ] Started dbus.service. [ OK ] Reached target system-config.target. [ OK ] Reached target user-config.target. [ 21.958189] extend-filesystems[1812]: Found loop1 [ 21.971263] extend-filesystems[1812]: Found nvme0n1 [ 21.978607] extend-filesystems[1812]: Found nvme0n1p1 [ 21.981678] extend-filesystems[1812]: Found nvme0n1p2 [ 21.984654] extend-filesystems[1812]: Found nvme0n1p3 [ 21.987393] extend-filesystems[1812]: Found usr [ 21.991371] extend-filesystems[1812]: Found nvme0n1p4 [ 21.996806] extend-filesystems[1812]: Found nvme0n1p6 [ 21.998627] extend-filesystems[1812]: Found nvme0n1p7 [ 22.001315] extend-filesystems[1812]: Found nvme0n1p9 Starting systemd-hostnamed.service... [ 22.010484] extend-filesystems[1812]: Checking size of /dev/nvme0n1p9 [ OK ] Finished motdgen.service. [ OK ] Finished update-ssh-keys-after-ignition.service. [ 22.132288] extend-filesystems[1812]: Resized partition /dev/nvme0n1p9 [ 22.171734] extend-filesystems[1866]: resize2fs 1.46.5 (30-Dec-2021) [ 22.332098] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ OK ] Started update-engine.service. [ OK ] Started locksmithd.service. [ OK ] Started systemd-logind.service. [ 22.427169] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 [ 22.314370] extend-filesystems[1866]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required [ 22.317319] extend-filesystems[1866]: old_desc_blocks = 1, new_desc_blocks = 1 [ 22.324618] extend-filesystems[1866]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. [ 22.327445] extend-filesystems[1812]: Resized filesystem in /dev/nvme0n1p9 [ OK ] Finished extend-filesystems.service. [ OK ] Started systemd-hostnamed.service. Starting polkit.service... [ OK ] Started polkit.service. [ OK ] Started containerd.service. 2025/09/06 00:20:27Z: Amazon SSM Agent v2.3.1319.0 is running 2025/09/06 00:20:27Z: OsProductName: Flatcar Container Linux by Kinvolk 2025/09/06 00:20:27Z: OsVersion: 3510.3.8 [ OK ] Finished coreos-metadata-sshkeys@core.service. [ OK ] Finished prepare-helm.service. [ OK ] Finished sshd-keygen.service. Starting issuegen.service... [ OK ] Finished issuegen.service. Starting systemd-user-sessions.service... [ OK ] Finished systemd-user-sessions.service. [ OK ] Started getty@tty1.service. [ OK ] Started serial-getty@ttyS0.service. [ OK ] Reached target getty.target. [ OK ] Started kubelet.service. [ OK ] Reached target multi-user.target. Starting systemd-update-utmp-runlevel.service... [ OK ] Finished systemd-update-utmp-runlevel.service. This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:20:30 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 33.098873] kauditd_printk_skb: 113 callbacks suppressed [ 33.098878] audit: type=1305 audit(1757118037.350:204): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 33.105995] audit: type=1300 audit(1757118037.350:204): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdd6293d0 a2=420 a3=0 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 33.119838] audit: type=1327 audit(1757118037.350:204): proctitle=2F7362696E2F617564697463746C002D44 [ 33.123768] audit: type=1131 audit(1757118037.357:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.156739] audit: type=1130 audit(1757118037.407:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.164488] audit: type=1106 audit(1757118037.413:207): pid=2075 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 33.173726] audit: type=1104 audit(1757118037.413:208): pid=2075 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 33.198743] audit: type=1106 audit(1757118037.450:209): pid=2072 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 33.210259] audit: type=1104 audit(1757118037.450:210): pid=2072 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 33.219512] audit: type=1131 audit(1757118037.456:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.17.171:22-147.75.109.163:55514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 34.116794] Initializing XFRM netlink socket This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:20:39 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 47.097645] kauditd_printk_skb: 88 callbacks suppressed [ 47.097649] audit: type=1130 audit(1757118051.340:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.111674] audit: type=1131 audit(1757118051.340:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.514496] audit: type=1130 audit(1757118051.757:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 47.654536] audit: type=1131 audit(1757118051.896:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 52.744678] audit: type=1131 audit(1757118056.984:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.772920] audit: type=1334 audit(1757118057.014:255): prog-id=43 op=UNLOAD [ 52.775542] audit: type=1334 audit(1757118057.014:256): prog-id=42 op=UNLOAD [ 52.778134] audit: type=1334 audit(1757118057.014:257): prog-id=41 op=UNLOAD [ 57.803575] audit: type=1130 audit(1757118062.041:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.818418] audit: type=1131 audit(1757118062.041:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.169251] audit: type=1130 audit(1757118062.408:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.277307] audit: type=1131 audit(1757118062.516:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 60.703992] audit: type=1130 audit(1757118064.943:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 60.714820] audit: type=1131 audit(1757118064.947:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 61.391735] audit: type=1400 audit(1757118065.631:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.398963] audit: type=1400 audit(1757118065.631:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.406142] audit: type=1400 audit(1757118065.631:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 61.413374] audit: type=1400 audit(1757118065.631:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 63.955317] kauditd_printk_skb: 170 callbacks suppressed [ 63.955322] audit: type=1400 audit(1757118068.194:438): avc: denied { mac_admin } for pid=2377 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 63.966307] audit: type=1401 audit(1757118068.194:438): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 63.972072] audit: type=1300 audit(1757118068.194:438): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a33320 a1=4000bf06c0 a2=4000a332f0 a3=25 items=0 ppid=1 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 63.985008] audit: type=1327 audit(1757118068.194:438): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 63.995256] audit: type=1400 audit(1757118068.194:439): avc: denied { mac_admin } for pid=2377 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 64.003013] audit: type=1401 audit(1757118068.194:439): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 64.007171] audit: type=1300 audit(1757118068.194:439): arch=c00000b7 syscall=5 success=no exit=-22 a0=40009e0460 a1=4000bf06d8 a2=4000a333b0 a3=25 items=0 ppid=1 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 64.021934] audit: type=1327 audit(1757118068.194:439): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 64.034562] audit: type=1325 audit(1757118068.210:440): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 64.041294] audit: type=1300 audit(1757118068.210:440): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd5546800 a2=0 a3=1 items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 69.512711] kauditd_printk_skb: 386 callbacks suppressed [ 69.512716] audit: type=1400 audit(1757118073.750:563): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.524461] audit: type=1300 audit(1757118073.750:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4003e91a10 a2=fc6 a3=0 items=0 ppid=2418 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 key=(null) [ 69.537795] audit: type=1327 audit(1757118073.750:563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E313731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 69.548360] audit: type=1400 audit(1757118073.763:564): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.564723] audit: type=1300 audit(1757118073.763:564): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40045f9b60 a2=fc6 a3=0 items=0 ppid=2418 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 key=(null) [ 69.589919] audit: type=1327 audit(1757118073.763:564): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E313731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 69.600392] audit: type=1400 audit(1757118073.763:565): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 69.609752] audit: type=1300 audit(1757118073.763:565): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40055b6040 a2=fc6 a3=0 items=0 ppid=2418 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 key=(null) [ 69.621804] audit: type=1327 audit(1757118073.763:565): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E313731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 69.632083] audit: type=1400 audit(1757118073.766:566): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 75.475862] kauditd_printk_skb: 278 callbacks suppressed [ 75.475867] audit: type=1400 audit(1757118079.714:822): avc: denied { watch } for pid=2561 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7376 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 [ 75.487865] audit: type=1300 audit(1757118079.714:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d6cf40 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 75.500010] audit: type=1327 audit(1757118079.714:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 78.852064] audit: type=1400 audit(1757118083.090:823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.861759] audit: type=1400 audit(1757118083.090:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.869043] audit: type=1400 audit(1757118083.090:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.876462] audit: type=1400 audit(1757118083.090:826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.884012] audit: type=1400 audit(1757118083.090:827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.891637] audit: type=1400 audit(1757118083.090:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 78.899218] audit: type=1400 audit(1757118083.090:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.157991] kauditd_printk_skb: 303 callbacks suppressed [ 82.157996] audit: type=1400 audit(1757118086.395:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.169648] audit: type=1400 audit(1757118086.404:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.179385] audit: type=1400 audit(1757118086.404:918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.187114] audit: type=1400 audit(1757118086.404:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.195496] audit: type=1400 audit(1757118086.404:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.204213] audit: type=1400 audit(1757118086.404:921): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.211882] audit: type=1400 audit(1757118086.404:922): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.221853] audit: type=1400 audit(1757118086.404:923): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.229765] audit: type=1400 audit(1757118086.404:924): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 82.237221] audit: type=1400 audit(1757118086.405:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 90.963570] kauditd_printk_skb: 47 callbacks suppressed [ 90.963576] audit: type=1106 audit(1757118095.199:934): pid=2105 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 90.977891] audit: type=1104 audit(1757118095.199:935): pid=2105 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 91.000645] audit: type=1106 audit(1757118095.237:936): pid=2102 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 91.021648] audit: type=1104 audit(1757118095.238:937): pid=2102 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 91.032198] audit: type=1131 audit(1757118095.251:938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.17.171:22-147.75.109.163:55524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 93.528535] audit: type=1325 audit(1757118097.765:939): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.538990] audit: type=1300 audit(1757118097.765:939): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffce184480 a2=0 a3=1 items=0 ppid=2968 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.555818] audit: type=1327 audit(1757118097.765:939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.561857] audit: type=1325 audit(1757118097.790:940): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.576813] audit: type=1300 audit(1757118097.790:940): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffce184480 a2=0 a3=1 items=0 ppid=2968 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.801621] kauditd_printk_skb: 7 callbacks suppressed [ 103.801626] audit: type=1325 audit(1757118108.038:943): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.810633] audit: type=1300 audit(1757118108.038:943): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff9b15070 a2=0 a3=1 items=0 ppid=2968 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.828434] audit: type=1327 audit(1757118108.038:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.852367] audit: type=1325 audit(1757118108.089:944): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.859105] audit: type=1300 audit(1757118108.089:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff9b15070 a2=0 a3=1 items=0 ppid=2968 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.873446] audit: type=1327 audit(1757118108.089:944): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.918181] audit: type=1325 audit(1757118108.154:945): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.927118] audit: type=1300 audit(1757118108.154:945): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcdf60ae0 a2=0 a3=1 items=0 ppid=2968 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.941047] audit: type=1327 audit(1757118108.154:945): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 103.951007] audit: type=1325 audit(1757118108.187:946): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3205 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.001968] kauditd_printk_skb: 185 callbacks suppressed [ 109.001973] audit: type=1325 audit(1757118113.239:1005): table=filter:101 family=2 entries=21 op=nft_register_rule pid=3427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.010066] audit: type=1300 audit(1757118113.239:1005): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd079d3f0 a2=0 a3=1 items=0 ppid=2968 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.024573] audit: type=1327 audit(1757118113.239:1005): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.030229] audit: type=1325 audit(1757118113.266:1006): table=nat:102 family=2 entries=19 op=nft_register_chain pid=3427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.036089] audit: type=1300 audit(1757118113.266:1006): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd079d3f0 a2=0 a3=1 items=0 ppid=2968 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.047486] audit: type=1327 audit(1757118113.266:1006): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.782855] audit: type=1400 audit(1757118114.020:1007): avc: denied { perfmon } for pid=3454 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 109.790413] audit: type=1300 audit(1757118114.020:1007): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3328 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.802783] audit: type=1327 audit(1757118114.020:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373164373336373465376465366364393231623234663730666333 [ 109.813331] audit: type=1400 audit(1757118114.020:1008): avc: denied { bpf } for pid=3454 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.817049] kauditd_printk_skb: 40 callbacks suppressed [ 115.817054] audit: type=1400 audit(1757118120.054:1014): avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.828309] audit: type=1300 audit(1757118120.054:1014): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3328 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.849595] audit: type=1327 audit(1757118120.054:1014): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563333463303662653138643735343737646563653036643335346437 [ 115.863773] audit: type=1400 audit(1757118120.055:1015): avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.873981] audit: type=1400 audit(1757118120.055:1015): avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.881785] audit: type=1400 audit(1757118120.055:1015): avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.889324] audit: type=1400 audit(1757118120.055:1015): avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.897136] audit: type=1400 audit(1757118120.055:1015): avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.904689] audit: type=1400 audit(1757118120.055:1015): avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 115.912356] audit: type=1400 audit(1757118120.055:1015): avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.290455] kauditd_printk_skb: 34 callbacks suppressed [ 128.290460] audit: type=1400 audit(1757118132.527:1021): avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.301628] audit: type=1300 audit(1757118132.527:1021): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3328 pid=3926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.313204] audit: type=1327 audit(1757118132.527:1021): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432326435303365376139393134326264353462636639386239636563 [ 128.333293] audit: type=1400 audit(1757118132.527:1022): avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.344694] audit: type=1400 audit(1757118132.527:1022): avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.354306] audit: type=1400 audit(1757118132.527:1022): avc: denied { bpf } for pid=3926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.362554] audit: type=1400 audit(1757118132.527:1022): avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.370861] audit: type=1400 audit(1757118132.527:1022): avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.382980] audit: type=1400 audit(1757118132.527:1022): avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.392730] audit: type=1400 audit(1757118132.527:1022): avc: denied { perfmon } for pid=3926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 128.694846] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 128.697747] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 130.759012] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 130.761422] IPv6: ADDRCONF(NETDEV_CHANGE): calia5585895761: link becomes ready [ 131.602698] IPv6: ADDRCONF(NETDEV_CHANGE): cali0f253bb73ed: link becomes ready [ 131.923923] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 131.926520] IPv6: ADDRCONF(NETDEV_CHANGE): cali76e5be60fb8: link becomes ready [ 132.797886] IPv6: ADDRCONF(NETDEV_CHANGE): cali263e28091e5: link becomes ready This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:17 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 133.433523] kauditd_printk_skb: 323 callbacks suppressed [ 133.433527] audit: type=1325 audit(1757118137.669:1115): table=filter:103 family=2 entries=20 op=nft_register_rule pid=4586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.443654] audit: type=1300 audit(1757118137.669:1115): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc45b0250 a2=0 a3=1 items=0 ppid=2968 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.464339] audit: type=1327 audit(1757118137.669:1115): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 133.474383] audit: type=1325 audit(1757118137.702:1116): table=nat:104 family=2 entries=14 op=nft_register_rule pid=4586 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.487076] audit: type=1300 audit(1757118137.702:1116): arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc45b0250 a2=0 a3=1 items=0 ppid=2968 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.508338] audit: type=1327 audit(1757118137.702:1116): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 133.650604] audit: type=1400 audit(1757118137.887:1117): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.659045] audit: type=1400 audit(1757118137.887:1118): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.671176] audit: type=1400 audit(1757118137.887:1119): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 133.684752] audit: type=1400 audit(1757118137.887:1120): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:18 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 134.654337] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 134.656665] IPv6: ADDRCONF(NETDEV_CHANGE): calicbd9612111f: link becomes ready [ 135.270521] IPv6: ADDRCONF(NETDEV_CHANGE): cali6cb0a26d24a: link becomes ready This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:19 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 135.664074] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 135.666459] IPv6: ADDRCONF(NETDEV_CHANGE): cali063e4481951: link becomes ready [ 136.553818] IPv6: ADDRCONF(NETDEV_CHANGE): calie362b7a86bc: link becomes ready This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:20 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:21 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:22 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: This is ip-172-31-17-171 (Linux aarch64 5.15.190-flatcar) 00:22:23 SSH host key: SHA256:2pukQMwHJRLr3uZnZUZSz1TZKt+fA+S6j1PHKMM7nDE (ECDSA) SSH host key: SHA256:z39rx2SHoo+MD0rdRBMfYfgCFGO/kPEXwRVr+vm+Vw4 (ED25519) SSH host key: SHA256:IiBtsVq/dRCHrqy3v+RP4MbEWKAFk4N2xxtBJ2BtFDo (RSA) eth0: 172.31.17.171 fe80::412:85ff:fe1f:4f5 ip-172-31-17-171 login: [ 139.951039] kauditd_printk_skb: 967 callbacks suppressed [ 139.951043] audit: type=1400 audit(1757118144.187:1367): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 139.962066] audit: type=1400 audit(1757118144.187:1368): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 139.970168] audit: type=1400 audit(1757118144.187:1369): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 139.978403] audit: type=1400 audit(1757118144.187:1370): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 139.987036] audit: type=1400 audit(1757118144.187:1371): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 139.996822] audit: type=1400 audit(1757118144.187:1372): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.005153] audit: type=1400 audit(1757118144.187:1373): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.014166] audit: type=1400 audit(1757118144.187:1374): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.023101] audit: type=1400 audit(1757118144.187:1375): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.034108] audit: type=1400 audit(1757118144.190:1376): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.376102] kauditd_printk_skb: 184 callbacks suppressed [ 145.376107] audit: type=1400 audit(1757118149.612:1434): avc: denied { perfmon } for pid=5407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.388463] audit: type=1300 audit(1757118149.612:1434): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4908 pid=5407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.409744] audit: type=1327 audit(1757118149.612:1434): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064376632343966653339343031646435333536666462616134646531 [ 145.421963] audit: type=1400 audit(1757118149.612:1435): avc: denied { bpf } for pid=5407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.434059] audit: type=1400 audit(1757118149.612:1435): avc: denied { bpf } for pid=5407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.447805] audit: type=1400 audit(1757118149.612:1435): avc: denied { bpf } for pid=5407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.465748] audit: type=1400 audit(1757118149.612:1435): avc: denied { perfmon } for pid=5407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.475096] audit: type=1400 audit(1757118149.612:1435): avc: denied { perfmon } for pid=5407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.483496] audit: type=1400 audit(1757118149.612:1435): avc: denied { perfmon } for pid=5407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 145.491760] audit: type=1400 audit(1757118149.612:1435): avc: denied { perfmon } for pid=5407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.547806] kauditd_printk_skb: 107 callbacks suppressed [ 150.547810] audit: type=1325 audit(1757118154.784:1469): table=filter:120 family=2 entries=14 op=nft_register_rule pid=5502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.557963] audit: type=1300 audit(1757118154.784:1469): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe352c200 a2=0 a3=1 items=0 ppid=2968 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.575677] audit: type=1327 audit(1757118154.784:1469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 150.586254] audit: type=1325 audit(1757118154.821:1470): table=nat:121 family=2 entries=20 op=nft_register_rule pid=5502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.621607] audit: type=1300 audit(1757118154.821:1470): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe352c200 a2=0 a3=1 items=0 ppid=2968 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.635025] audit: type=1327 audit(1757118154.821:1470): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 151.716225] audit: type=1130 audit(1757118155.952:1471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.17.171:22-147.75.109.163:35252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.934257] audit: type=1101 audit(1757118156.170:1472): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.963571] audit: type=1103 audit(1757118156.199:1473): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 151.976459] audit: type=1006 audit(1757118156.199:1474): pid=5535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 158.599124] kauditd_printk_skb: 135 callbacks suppressed [ 158.599129] audit: type=1130 audit(1757118162.835:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.17.171:22-147.75.109.163:43026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.802420] audit: type=1101 audit(1757118163.038:1525): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 158.814797] audit: type=1103 audit(1757118163.041:1526): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 158.827863] audit: type=1006 audit(1757118163.041:1527): pid=5683 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 158.839114] audit: type=1300 audit(1757118163.041:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca0a1430 a2=3 a3=1 items=0 ppid=1 pid=5683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.849801] audit: type=1327 audit(1757118163.041:1527): proctitle=737368643A20636F7265205B707269765D [ 158.854617] audit: type=1105 audit(1757118163.070:1528): pid=5683 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 158.867080] audit: type=1103 audit(1757118163.073:1529): pid=5685 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 159.103047] audit: type=1106 audit(1757118163.339:1530): pid=5683 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 159.117683] audit: type=1104 audit(1757118163.339:1531): pid=5683 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.131486] kauditd_printk_skb: 1 callbacks suppressed [ 164.131522] audit: type=1130 audit(1757118168.366:1533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.17.171:22-147.75.109.163:43030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.330923] audit: type=1101 audit(1757118168.567:1534): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.341009] audit: type=1103 audit(1757118168.567:1535): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.350849] audit: type=1006 audit(1757118168.567:1536): pid=5714 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 164.361505] audit: type=1300 audit(1757118168.567:1536): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe838faf0 a2=3 a3=1 items=0 ppid=1 pid=5714 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.372430] audit: type=1327 audit(1757118168.567:1536): proctitle=737368643A20636F7265205B707269765D [ 164.375947] audit: type=1105 audit(1757118168.613:1537): pid=5714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.387545] audit: type=1103 audit(1757118168.613:1538): pid=5716 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.776606] audit: type=1106 audit(1757118169.013:1539): pid=5714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 164.794512] audit: type=1104 audit(1757118169.013:1540): pid=5714 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 169.801753] kauditd_printk_skb: 7 callbacks suppressed [ 169.801758] audit: type=1130 audit(1757118174.038:1544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.17.171:22-147.75.109.163:58514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.986150] audit: type=1101 audit(1757118174.222:1545): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 169.996449] audit: type=1103 audit(1757118174.225:1546): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 170.006458] audit: type=1006 audit(1757118174.225:1547): pid=5730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 170.012461] audit: type=1300 audit(1757118174.225:1547): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc39d550 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.023236] audit: type=1327 audit(1757118174.225:1547): proctitle=737368643A20636F7265205B707269765D [ 170.027579] audit: type=1105 audit(1757118174.259:1548): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 170.040106] audit: type=1103 audit(1757118174.276:1549): pid=5732 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 170.310458] audit: type=1106 audit(1757118174.546:1550): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 170.338559] audit: type=1104 audit(1757118174.558:1551): pid=5730 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.341354] kauditd_printk_skb: 7 callbacks suppressed [ 175.341359] audit: type=1130 audit(1757118179.577:1555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.17.171:22-147.75.109.163:58520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.542872] audit: type=1101 audit(1757118179.779:1556): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.553602] audit: type=1103 audit(1757118179.782:1557): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.564110] audit: type=1006 audit(1757118179.782:1558): pid=5781 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 175.571838] audit: type=1300 audit(1757118179.782:1558): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b68480 a2=3 a3=1 items=0 ppid=1 pid=5781 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.582884] audit: type=1327 audit(1757118179.782:1558): proctitle=737368643A20636F7265205B707269765D [ 175.606813] audit: type=1105 audit(1757118179.843:1559): pid=5781 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.618805] audit: type=1103 audit(1757118179.843:1560): pid=5783 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.883981] audit: type=1106 audit(1757118180.119:1561): pid=5781 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 175.899633] audit: type=1104 audit(1757118180.120:1562): pid=5781 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 182.669874] kauditd_printk_skb: 57 callbacks suppressed [ 182.669878] audit: type=1325 audit(1757118186.905:1604): table=filter:132 family=2 entries=33 op=nft_register_rule pid=5869 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.679098] audit: type=1300 audit(1757118186.905:1604): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd4791dd0 a2=0 a3=1 items=0 ppid=2968 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.692254] audit: type=1327 audit(1757118186.905:1604): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 182.700075] audit: type=1325 audit(1757118186.936:1605): table=nat:133 family=2 entries=31 op=nft_register_chain pid=5869 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.705982] audit: type=1300 audit(1757118186.936:1605): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffd4791dd0 a2=0 a3=1 items=0 ppid=2968 pid=5869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.717928] audit: type=1327 audit(1757118186.936:1605): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 184.594946] audit: type=1130 audit(1757118188.831:1606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.17.171:22-147.75.109.163:60400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.765289] audit: type=1101 audit(1757118189.001:1607): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 184.777491] audit: type=1103 audit(1757118189.013:1608): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 184.787580] audit: type=1006 audit(1757118189.013:1609): pid=5871 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 188.920985] kauditd_printk_skb: 13 callbacks suppressed [ 188.920989] audit: type=1400 audit(1757118193.157:1617): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.933176] audit: type=1400 audit(1757118193.157:1618): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.942652] audit: type=1300 audit(1757118193.157:1618): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400153cb80 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 188.954972] audit: type=1327 audit(1757118193.157:1618): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.966444] audit: type=1300 audit(1757118193.157:1617): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022fe7b0 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 188.979445] audit: type=1327 audit(1757118193.157:1617): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 189.516267] audit: type=1400 audit(1757118193.753:1619): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 189.526259] audit: type=1300 audit(1757118193.753:1619): arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=4004be1d10 a2=fc6 a3=0 items=0 ppid=2418 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 key=(null) [ 189.539283] audit: type=1327 audit(1757118193.753:1619): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31372E313731002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 189.550328] audit: type=1400 audit(1757118193.765:1620): avc: denied { watch } for pid=2590 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c622,c687 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.129250] kauditd_printk_skb: 25 callbacks suppressed [ 194.129255] audit: type=1400 audit(1757118198.365:1634): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.140883] audit: type=1300 audit(1757118198.365:1634): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002e1e2a0 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 194.153182] audit: type=1327 audit(1757118198.365:1634): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 194.163644] audit: type=1400 audit(1757118198.365:1635): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.173260] audit: type=1300 audit(1757118198.365:1635): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400153d720 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 194.185925] audit: type=1327 audit(1757118198.365:1635): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 194.196383] audit: type=1400 audit(1757118198.368:1636): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.205978] audit: type=1300 audit(1757118198.368:1636): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400153df00 a2=fc6 a3=0 items=0 ppid=2435 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 key=(null) [ 194.218443] audit: type=1327 audit(1757118198.368:1636): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 194.229190] audit: type=1400 audit(1757118198.368:1637): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c639,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 201.237429] kauditd_printk_skb: 13 callbacks suppressed [ 201.237433] audit: type=1130 audit(1757118205.474:1647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.17.171:22-147.75.109.163:42622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.447699] audit: type=1101 audit(1757118205.684:1648): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 201.458949] audit: type=1103 audit(1757118205.695:1649): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 201.469635] audit: type=1006 audit(1757118205.695:1650): pid=6189 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 201.488360] audit: type=1300 audit(1757118205.695:1650): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2f3e6e0 a2=3 a3=1 items=0 ppid=1 pid=6189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.509104] audit: type=1327 audit(1757118205.695:1650): proctitle=737368643A20636F7265205B707269765D [ 201.516034] audit: type=1105 audit(1757118205.746:1651): pid=6189 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 201.527789] audit: type=1103 audit(1757118205.752:1652): pid=6191 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 201.836871] audit: type=1106 audit(1757118206.074:1653): pid=6189 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 201.855302] audit: type=1104 audit(1757118206.074:1654): pid=6189 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 206.534752] kauditd_printk_skb: 4 callbacks suppressed [ 206.534757] audit: type=1400 audit(1757118210.763:1657): avc: denied { watch } for pid=5370 comm="apiserver" path="/calico-apiserver-certs/..2025_09_06_00_22_01.2969838511/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c631,c912 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c631,c912 tclass=file permissive=0 [ 206.552684] audit: type=1300 audit(1757118210.763:1657): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001482300 a2=fc6 a3=0 items=0 ppid=4751 pid=5370 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c631,c912 key=(null) [ 206.565360] audit: type=1327 audit(1757118210.763:1657): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 206.874053] audit: type=1130 audit(1757118211.111:1658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.17.171:22-147.75.109.163:46206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.051358] audit: type=1101 audit(1757118211.288:1659): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 207.063667] audit: type=1103 audit(1757118211.299:1660): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 207.073864] audit: type=1006 audit(1757118211.299:1661): pid=6201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 207.080080] audit: type=1300 audit(1757118211.299:1661): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4ee1ce0 a2=3 a3=1 items=0 ppid=1 pid=6201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.090382] audit: type=1327 audit(1757118211.299:1661): proctitle=737368643A20636F7265205B707269765D [ 207.117762] audit: type=1105 audit(1757118211.354:1662): pid=6201 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 212.489201] kauditd_printk_skb: 4 callbacks suppressed [ 212.489205] audit: type=1130 audit(1757118216.726:1667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.17.171:22-147.75.109.163:46208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.681662] audit: type=1101 audit(1757118216.918:1668): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 212.695924] audit: type=1103 audit(1757118216.931:1669): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 212.707714] audit: type=1006 audit(1757118216.931:1670): pid=6218 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 212.724569] audit: type=1300 audit(1757118216.931:1670): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdd818e10 a2=3 a3=1 items=0 ppid=1 pid=6218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 212.738856] audit: type=1327 audit(1757118216.931:1670): proctitle=737368643A20636F7265205B707269765D [ 212.752759] audit: type=1105 audit(1757118216.989:1671): pid=6218 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 212.768995] audit: type=1103 audit(1757118217.002:1672): pid=6235 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 213.031595] audit: type=1106 audit(1757118217.266:1673): pid=6218 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 213.052405] audit: type=1104 audit(1757118217.267:1674): pid=6218 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success'