41): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 61.849700] audit: type=1300 audit(1757721891.580:441): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b04020 a1=4000ac2d08 a2=40009e9b90 a3=25 items=0 ppid=1 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 61.860742] audit: type=1327 audit(1757721891.580:441): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 61.871012] audit: type=1325 audit(1757721891.595:442): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 61.876587] audit: type=1300 audit(1757721891.595:442): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe8aac380 a2=0 a3=1 items=0 ppid=2359 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 67.751142] kauditd_printk_skb: 380 callbacks suppressed [ 67.751146] audit: type=1400 audit(1757721897.527:563): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 67.767671] audit: type=1400 audit(1757721897.530:564): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 67.779954] audit: type=1300 audit(1757721897.530:564): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4004d34b40 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 67.794833] audit: type=1327 audit(1757721897.530:564): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 67.806584] audit: type=1300 audit(1757721897.527:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40063deba0 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 67.820579] audit: type=1327 audit(1757721897.527:563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 67.831637] audit: type=1400 audit(1757721897.544:565): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 67.842088] audit: type=1300 audit(1757721897.544:565): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=400417e690 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 67.854208] audit: type=1327 audit(1757721897.544:565): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 67.864796] audit: type=1400 audit(1757721897.556:566): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6799 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 74.957636] kauditd_printk_skb: 272 callbacks suppressed [ 74.957641] audit: type=1400 audit(1757721904.735:820): avc: denied { watch } for pid=2594 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 [ 74.970903] audit: type=1300 audit(1757721904.735:820): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000bca7c0 a2=fc6 a3=0 items=0 ppid=2411 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 key=(null) [ 74.983574] audit: type=1327 audit(1757721904.735:820): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 75.805680] audit: type=1400 audit(1757721905.583:821): avc: denied { watch } for pid=2594 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 75.816215] audit: type=1400 audit(1757721905.586:822): avc: denied { watch } for pid=2594 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 75.826752] audit: type=1300 audit(1757721905.586:822): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400088d440 a2=fc6 a3=0 items=0 ppid=2411 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 key=(null) [ 75.840224] audit: type=1327 audit(1757721905.586:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 75.851251] audit: type=1400 audit(1757721905.587:823): avc: denied { watch } for pid=2594 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 75.861868] audit: type=1300 audit(1757721905.587:823): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400088d540 a2=fc6 a3=0 items=0 ppid=2411 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c653,c1000 key=(null) [ 75.875360] audit: type=1327 audit(1757721905.587:823): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 79.985494] kauditd_printk_skb: 5 callbacks suppressed [ 79.985498] audit: type=1400 audit(1757721909.763:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 79.997209] audit: type=1400 audit(1757721909.763:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.005852] audit: type=1400 audit(1757721909.763:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.013542] audit: type=1400 audit(1757721909.763:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.021630] audit: type=1400 audit(1757721909.763:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.031437] audit: type=1400 audit(1757721909.763:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.040174] audit: type=1400 audit(1757721909.763:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.054720] audit: type=1400 audit(1757721909.763:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.064567] audit: type=1400 audit(1757721909.763:833): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 80.073608] audit: type=1400 audit(1757721909.765:834): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 87.626008] kauditd_printk_skb: 357 callbacks suppressed [ 87.626013] audit: type=1334 audit(1757721917.403:936): prog-id=120 op=UNLOAD [ 87.632576] audit: type=1334 audit(1757721917.410:937): prog-id=123 op=UNLOAD [ 88.936525] audit: type=1400 audit(1757721918.714:938): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.954981] audit: type=1400 audit(1757721918.726:939): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.972900] audit: type=1400 audit(1757721918.726:940): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 88.995339] audit: type=1400 audit(1757721918.726:941): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.010689] audit: type=1400 audit(1757721918.726:942): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.021916] audit: type=1400 audit(1757721918.726:943): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.037819] audit: type=1400 audit(1757721918.726:944): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 89.055668] audit: type=1400 audit(1757721918.726:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 98.547607] kauditd_printk_skb: 54 callbacks suppressed [ 98.547611] audit: type=1325 audit(1757721928.325:961): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.577539] audit: type=1300 audit(1757721928.325:961): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc4829870 a2=0 a3=1 items=0 ppid=3059 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.592924] audit: type=1327 audit(1757721928.325:961): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 98.599887] audit: type=1325 audit(1757721928.372:962): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.609876] audit: type=1300 audit(1757721928.372:962): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc4829870 a2=0 a3=1 items=0 ppid=3059 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.626818] audit: type=1327 audit(1757721928.372:962): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 98.676522] audit: type=1325 audit(1757721928.454:963): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.682745] audit: type=1300 audit(1757721928.454:963): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff07d0730 a2=0 a3=1 items=0 ppid=3059 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.697783] audit: type=1327 audit(1757721928.454:963): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 98.773376] audit: type=1325 audit(1757721928.551:964): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.102368] kauditd_printk_skb: 2 callbacks suppressed [ 109.102373] audit: type=1325 audit(1757721938.880:965): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.111579] audit: type=1300 audit(1757721938.880:965): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc71110c0 a2=0 a3=1 items=0 ppid=3059 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.124608] audit: type=1327 audit(1757721938.880:965): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.158006] audit: type=1325 audit(1757721938.936:966): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.174770] audit: type=1300 audit(1757721938.936:966): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc71110c0 a2=0 a3=1 items=0 ppid=3059 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.197079] audit: type=1327 audit(1757721938.936:966): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.229621] audit: type=1325 audit(1757721939.004:967): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 109.237848] audit: type=1300 audit(1757721939.004:967): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcf266230 a2=0 a3=1 items=0 ppid=3059 pid=3371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 109.251084] audit: type=1327 audit(1757721939.004:967): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 109.257931] audit: type=1325 audit(1757721939.035:968): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3371 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.105241] kauditd_printk_skb: 222 callbacks suppressed [ 114.105245] audit: type=1325 audit(1757721943.883:1031): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3641 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.115183] audit: type=1300 audit(1757721943.883:1031): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc29cda40 a2=0 a3=1 items=0 ppid=3059 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.127529] audit: type=1327 audit(1757721943.883:1031): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 114.151265] audit: type=1325 audit(1757721943.929:1032): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3641 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.161088] audit: type=1300 audit(1757721943.929:1032): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc29cda40 a2=0 a3=1 items=0 ppid=3059 pid=3641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.181211] audit: type=1327 audit(1757721943.929:1032): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 114.271289] audit: type=1334 audit(1757721944.049:1033): prog-id=142 op=UNLOAD [ 119.202773] audit: type=1400 audit(1757721948.979:1034): avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.210873] audit: type=1300 audit(1757721948.979:1034): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3442 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.224038] audit: type=1327 audit(1757721948.979:1034): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438343932396434323665396331613839343966356162353965383139 [ 119.237259] audit: type=1400 audit(1757721948.979:1035): avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.252044] audit: type=1400 audit(1757721948.979:1035): avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.263367] audit: type=1400 audit(1757721948.979:1035): avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.273495] audit: type=1400 audit(1757721948.979:1035): avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.282374] audit: type=1400 audit(1757721948.979:1035): avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.290262] audit: type=1400 audit(1757721948.979:1035): avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.298206] audit: type=1400 audit(1757721948.979:1035): avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 127.755110] kauditd_printk_skb: 34 callbacks suppressed [ 127.755114] audit: type=1400 audit(1757721957.530:1041): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6789 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 127.766616] audit: type=1300 audit(1757721957.530:1041): arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40075faa80 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 127.779112] audit: type=1327 audit(1757721957.530:1041): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 127.790121] audit: type=1400 audit(1757721957.542:1042): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6793 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 127.799940] audit: type=1300 audit(1757721957.542:1042): arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4003e6bbf0 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 127.812824] audit: type=1327 audit(1757721957.542:1042): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 127.822904] audit: type=1400 audit(1757721957.542:1043): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6791 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 127.832492] audit: type=1300 audit(1757721957.542:1043): arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40028cb650 a2=fc6 a3=0 items=0 ppid=2439 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 key=(null) [ 127.844619] audit: type=1327 audit(1757721957.542:1043): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E3231002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 127.854940] audit: type=1400 audit(1757721957.565:1044): avc: denied { watch } for pid=2582 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6799 scontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c608 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 131.140994] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 131.144146] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 132.939114] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 132.941534] IPv6: ADDRCONF(NETDEV_CHANGE): cali09469adeaf6: link becomes ready [ 133.022680] kauditd_printk_skb: 57 callbacks suppressed [ 133.022685] audit: type=1400 audit(1757721962.798:1055): avc: denied { write } for pid=4349 comm="tee" name="fd" dev="proc" ino=21445 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 133.036220] audit: type=1300 audit(1757721962.798:1055): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc95f37e5 a2=241 a3=1b6 items=1 ppid=4321 pid=4349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.047867] audit: type=1307 audit(1757721962.798:1055): cwd="/etc/service/enabled/bird6/log" [ 133.051630] audit: type=1302 audit(1757721962.798:1055): item=0 name="/dev/fd/63" inode=21434 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 133.061392] audit: type=1327 audit(1757721962.798:1055): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 133.112044] audit: type=1400 audit(1757721962.885:1056): avc: denied { write } for pid=4387 comm="tee" name="fd" dev="proc" ino=22375 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 133.140659] audit: type=1300 audit(1757721962.885:1056): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe85587d5 a2=241 a3=1b6 items=1 ppid=4334 pid=4387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.157737] audit: type=1307 audit(1757721962.885:1056): cwd="/etc/service/enabled/allocate-tunnel-addrs/log" [ 133.169736] audit: type=1302 audit(1757721962.885:1056): item=0 name="/dev/fd/63" inode=21488 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 133.180804] audit: type=1327 audit(1757721962.885:1056): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 134.252516] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 134.254919] IPv6: ADDRCONF(NETDEV_CHANGE): cali6359d8ef051: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:04 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 135.571879] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 135.574213] IPv6: ADDRCONF(NETDEV_CHANGE): calicfe0cd5facc: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:06 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 137.512261] IPv6: ADDRCONF(NETDEV_CHANGE): cali448c2bc8c41: link becomes ready [ 137.794522] IPv6: ADDRCONF(NETDEV_CHANGE): calia87bab4ca93: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:07 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 138.067010] kauditd_printk_skb: 666 callbacks suppressed [ 138.067014] audit: type=1400 audit(1757721967.841:1219): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.082796] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.084689] audit: type=1400 audit(1757721967.841:1220): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.086983] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 138.097902] audit: type=1400 audit(1757721967.841:1221): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.115061] audit: type=1400 audit(1757721967.841:1222): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.116638] audit: backlog limit exceeded [ 138.131157] audit: type=1400 audit(1757721967.841:1223): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.145146] audit: type=1400 audit(1757721967.841:1224): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.158410] audit: type=1400 audit(1757721967.841:1225): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 138.224530] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 138.226855] IPv6: ADDRCONF(NETDEV_CHANGE): cali5e60fccd889: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:08 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 138.959728] IPv6: ADDRCONF(NETDEV_CHANGE): calia65782482fe: link becomes ready [ 139.174403] IPv6: ADDRCONF(NETDEV_CHANGE): califd23ec105c7: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:09 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 140.201182] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 140.205742] IPv6: ADDRCONF(NETDEV_CHANGE): cali36b210a4cde: link becomes ready This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:10 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:11 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:12 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 143.308638] kauditd_printk_skb: 681 callbacks suppressed [ 143.308644] audit: type=1325 audit(1757721973.083:1431): table=filter:113 family=2 entries=14 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.322956] audit: type=1300 audit(1757721973.083:1431): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffff7a78a0 a2=0 a3=1 items=0 ppid=3059 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.340350] audit: type=1327 audit(1757721973.083:1431): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 143.361733] audit: type=1325 audit(1757721973.114:1432): table=nat:114 family=2 entries=20 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.377087] audit: type=1300 audit(1757721973.114:1432): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffff7a78a0 a2=0 a3=1 items=0 ppid=3059 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.414348] audit: type=1327 audit(1757721973.114:1432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 144.962572] audit: type=1400 audit(1757721974.737:1433): avc: denied { watch } for pid=5464 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_51.4247465395/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c882,c934 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c882,c934 tclass=file permissive=0 [ 144.979057] audit: type=1300 audit(1757721974.737:1433): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40025ca9a0 a2=fc6 a3=0 items=0 ppid=4535 pid=5464 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c882,c934 key=(null) [ 145.014112] audit: type=1327 audit(1757721974.737:1433): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 145.184948] audit: type=1325 audit(1757721974.959:1434): table=filter:115 family=2 entries=13 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 148.704804] kauditd_printk_skb: 87 callbacks suppressed [ 148.704808] audit: type=1106 audit(1757721978.478:1471): pid=5569 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.721944] audit: type=1104 audit(1757721978.478:1472): pid=5569 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.738922] audit: type=1131 audit(1757721978.492:1473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.21:22-139.178.89.65:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.751643] audit: type=1130 audit(1757721978.523:1474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.21:22-139.178.89.65:51118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.980516] audit: type=1101 audit(1757721978.754:1475): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 148.993981] audit: type=1103 audit(1757721978.767:1476): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.011934] audit: type=1006 audit(1757721978.767:1477): pid=5600 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 149.022984] audit: type=1300 audit(1757721978.767:1477): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0405810 a2=3 a3=1 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.037006] audit: type=1327 audit(1757721978.767:1477): proctitle=737368643A20636F7265205B707269765D [ 149.046241] audit: type=1105 audit(1757721978.819:1478): pid=5600 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.705281] kauditd_printk_skb: 243 callbacks suppressed [ 153.705287] audit: type=1300 audit(1757721983.478:1551): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffe2a6de90 a2=0 a3=1 items=0 ppid=3059 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.729019] audit: type=1327 audit(1757721983.478:1551): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 153.865604] audit: type=1400 audit(1757721983.639:1552): avc: denied { watch } for pid=5699 comm="apiserver" path="/calico-apiserver-certs/..2025_09_13_00_05_51.3223640934/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c129,c458 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c129,c458 tclass=file permissive=0 [ 153.882941] audit: type=1300 audit(1757721983.639:1552): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000f4c500 a2=fc6 a3=0 items=0 ppid=4948 pid=5699 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c129,c458 key=(null) [ 153.897622] audit: type=1327 audit(1757721983.639:1552): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 154.426400] audit: type=1325 audit(1757721984.199:1553): table=filter:127 family=2 entries=10 op=nft_register_rule pid=5806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.433439] audit: type=1300 audit(1757721984.199:1553): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe18efa00 a2=0 a3=1 items=0 ppid=3059 pid=5806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.448563] audit: type=1327 audit(1757721984.199:1553): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.457499] audit: type=1325 audit(1757721984.230:1554): table=nat:128 family=2 entries=42 op=nft_register_chain pid=5806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.463811] audit: type=1300 audit(1757721984.230:1554): arch=c00000b7 syscall=211 success=yes exit=13892 a0=3 a1=ffffe18efa00 a2=0 a3=1 items=0 ppid=3059 pid=5806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:25 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 160.148417] kauditd_printk_skb: 134 callbacks suppressed [ 160.148422] audit: type=1130 audit(1757721989.922:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.21:22-139.178.89.65:58736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 160.343872] audit: type=1101 audit(1757721990.118:1599): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.356209] audit: type=1103 audit(1757721990.130:1600): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.367042] audit: type=1006 audit(1757721990.131:1601): pid=6089 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 160.374117] audit: type=1300 audit(1757721990.131:1601): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc83fb080 a2=3 a3=1 items=0 ppid=1 pid=6089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.385990] audit: type=1327 audit(1757721990.131:1601): proctitle=737368643A20636F7265205B707269765D [ 160.393753] audit: type=1105 audit(1757721990.162:1602): pid=6089 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.405393] audit: type=1103 audit(1757721990.166:1603): pid=6093 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.671152] audit: type=1106 audit(1757721990.445:1604): pid=6089 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 160.682736] audit: type=1104 audit(1757721990.445:1605): pid=6089 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.699461] kauditd_printk_skb: 1 callbacks suppressed [ 165.699466] audit: type=1130 audit(1757721995.473:1607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.21:22-139.178.89.65:58742 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.893594] audit: type=1101 audit(1757721995.666:1608): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.903912] audit: type=1103 audit(1757721995.672:1609): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.913869] audit: type=1006 audit(1757721995.672:1610): pid=6131 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 165.920251] audit: type=1300 audit(1757721995.672:1610): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbfb1130 a2=3 a3=1 items=0 ppid=1 pid=6131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.930791] audit: type=1327 audit(1757721995.672:1610): proctitle=737368643A20636F7265205B707269765D [ 165.953909] audit: type=1105 audit(1757721995.726:1611): pid=6131 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.966521] audit: type=1103 audit(1757721995.738:1612): pid=6133 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.235437] audit: type=1106 audit(1757721996.008:1613): pid=6131 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 166.248167] audit: type=1104 audit(1757721996.008:1614): pid=6131 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.266578] kauditd_printk_skb: 1 callbacks suppressed [ 171.266583] audit: type=1130 audit(1757722001.038:1616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.21:22-139.178.89.65:36680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.481121] audit: type=1101 audit(1757722001.254:1617): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.495790] audit: type=1103 audit(1757722001.266:1618): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.505614] audit: type=1006 audit(1757722001.266:1619): pid=6164 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 171.512151] audit: type=1300 audit(1757722001.266:1619): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3e2b6b0 a2=3 a3=1 items=0 ppid=1 pid=6164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.523573] audit: type=1327 audit(1757722001.266:1619): proctitle=737368643A20636F7265205B707269765D [ 171.549464] audit: type=1105 audit(1757722001.320:1620): pid=6164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.562816] audit: type=1103 audit(1757722001.334:1621): pid=6166 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.862144] audit: type=1106 audit(1757722001.635:1622): pid=6164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.885737] audit: type=1104 audit(1757722001.646:1623): pid=6164 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.593403] kauditd_printk_skb: 1 callbacks suppressed [ 176.593408] audit: type=1325 audit(1757722006.365:1625): table=filter:135 family=2 entries=10 op=nft_register_rule pid=6177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.601386] audit: type=1300 audit(1757722006.365:1625): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdd60e920 a2=0 a3=1 items=0 ppid=3059 pid=6177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.613999] audit: type=1327 audit(1757722006.365:1625): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.620565] audit: type=1325 audit(1757722006.377:1626): table=nat:136 family=2 entries=38 op=nft_register_rule pid=6177 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.626800] audit: type=1300 audit(1757722006.377:1626): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffdd60e920 a2=0 a3=1 items=0 ppid=3059 pid=6177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.640109] audit: type=1327 audit(1757722006.377:1626): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.888923] audit: type=1130 audit(1757722006.661:1627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.21:22-139.178.89.65:36690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.088942] audit: type=1101 audit(1757722006.862:1628): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.099556] audit: type=1103 audit(1757722006.865:1629): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 177.109112] audit: type=1006 audit(1757722006.865:1630): pid=6179 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 This is ip-172-31-27-21 (Linux aarch64 5.15.192-flatcar) 00:06:50 SSH host key: SHA256:kwxho/x34Ew6xMfxXa2cZshN/w2VSZfMmehlo+ICz4M (RSA) SSH host key: SHA256:TP2z6nD6ay8BxmucZI6RrDmtVmxZuUuoWlblpo5ALfE (ECDSA) SSH host key: SHA256:TR/RdjaYiYx98o0D1WE8F7LWTDlpXmVGGKLdeqIQpdU (ED25519) eth0: 172.31.27.21 fe80::4e4:3bff:fe0f:4e5f ip-172-31-27-21 login: [ 186.612069] kauditd_printk_skb: 85 callbacks suppressed [ 186.612074] audit: type=1130 audit(1757722016.385:1686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.21:22-139.178.89.65:54692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.791143] audit: type=1101 audit(1757722016.564:1687): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.801624] audit: type=1103 audit(1757722016.564:1688): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.811625] audit: type=1006 audit(1757722016.564:1689): pid=6387 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 186.817720] audit: type=1300 audit(1757722016.564:1689): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9afa950 a2=3 a3=1 items=0 ppid=1 pid=6387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.828348] audit: type=1327 audit(1757722016.564:1689): proctitle=737368643A20636F7265205B707269765D [ 186.837716] audit: type=1105 audit(1757722016.611:1690): pid=6387 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.849149] audit: type=1103 audit(1757722016.611:1691): pid=6389 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 187.090160] audit: type=1106 audit(1757722016.863:1692): pid=6387 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 187.103788] audit: type=1104 audit(1757722016.863:1693): pid=6387 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.128417] kauditd_printk_skb: 31 callbacks suppressed [ 192.128422] audit: type=1130 audit(1757722021.900:1705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.21:22-139.178.89.65:55822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.319204] audit: type=1101 audit(1757722022.091:1706): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.329890] audit: type=1103 audit(1757722022.097:1707): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.340482] audit: type=1006 audit(1757722022.097:1708): pid=6442 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 192.347202] audit: type=1300 audit(1757722022.097:1708): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3f9c780 a2=3 a3=1 items=0 ppid=1 pid=6442 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.358555] audit: type=1327 audit(1757722022.097:1708): proctitle=737368643A20636F7265205B707269765D [ 192.380354] audit: type=1105 audit(1757722022.152:1709): pid=6442 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.393339] audit: type=1103 audit(1757722022.165:1710): pid=6445 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.644546] audit: type=1106 audit(1757722022.416:1711): pid=6442 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.659741] audit: type=1104 audit(1757722022.417:1712): pid=6442 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.678443] kauditd_printk_skb: 13 callbacks suppressed [ 197.678448] audit: type=1130 audit(1757722027.450:1718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.21:22-139.178.89.65:55828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.874461] audit: type=1101 audit(1757722027.646:1719): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.889221] audit: type=1103 audit(1757722027.658:1720): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.899917] audit: type=1006 audit(1757722027.658:1721): pid=6890 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 197.906353] audit: type=1300 audit(1757722027.658:1721): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffedc8990 a2=3 a3=1 items=0 ppid=1 pid=6890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.918734] audit: type=1327 audit(1757722027.658:1721): proctitle=737368643A20636F7265205B707269765D [ 197.949803] audit: type=1105 audit(1757722027.720:1722): pid=6890 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.964900] audit: type=1103 audit(1757722027.734:1723): pid=6892 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.275179] audit: type=1106 audit(1757722028.045:1724): pid=6890 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.288881] audit: type=1104 audit(1757722028.045:1725): pid=6890 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.307536] kauditd_printk_skb: 1 callbacks suppressed [ 203.307541] audit: type=1130 audit(1757722033.079:1727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.21:22-139.178.89.65:59238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.516796] audit: type=1101 audit(1757722033.288:1728): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.533196] audit: type=1103 audit(1757722033.288:1729): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.554339] audit: type=1006 audit(1757722033.288:1730): pid=6906 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 203.567010] audit: type=1300 audit(1757722033.288:1730): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc81efcc0 a2=3 a3=1 items=0 ppid=1 pid=6906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.585023] audit: type=1327 audit(1757722033.288:1730): proctitle=737368643A20636F7265205B707269765D [ 203.588518] audit: type=1105 audit(1757722033.326:1731): pid=6906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.604012] audit: type=1103 audit(1757722033.332:1732): pid=6923 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.858870] audit: type=1106 audit(1757722033.630:1733): pid=6906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.872263] audit: type=1104 audit(1757722033.631:1734): pid=6906 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.896280] kauditd_printk_skb: 1 callbacks suppressed [ 208.896284] audit: type=1130 audit(1757722038.668:1736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.21:22-139.178.89.65:59260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.072363] audit: type=1101 audit(1757722038.845:1737): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.086840] audit: type=1103 audit(1757722038.847:1738): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.099837] audit: type=1006 audit(1757722038.848:1739): pid=6938 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 209.111802] audit: type=1300 audit(1757722038.848:1739): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc25c3570 a2=3 a3=1 items=0 ppid=1 pid=6938 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.124251] audit: type=1327 audit(1757722038.848:1739): proctitle=737368643A20636F7265205B707269765D [ 209.140780] audit: type=1105 audit(1757722038.913:1740): pid=6938 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.160010] audit: type=1103 audit(1757722038.913:1741): pid=6940 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.506481] audit: type=1106 audit(1757722039.276:1742): pid=6938 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.521340] audit: type=1104 audit(1757722039.277:1743): pid=6938 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.535781] kauditd_printk_skb: 4 callbacks suppressed [ 214.535786] audit: type=1130 audit(1757722044.308:1746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.21:22-139.178.89.65:39720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 214.728626] audit: type=1101 audit(1757722044.501:1747): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.740584] audit: type=1103 audit(1757722044.512:1748): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.751007] audit: type=1006 audit(1757722044.512:1749): pid=6970 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 214.757588] audit: type=1300 audit(1757722044.512:1749): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc1371f0 a2=3 a3=1 items=0 ppid=1 pid=6970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.769837] audit: type=1327 audit(1757722044.512:1749): proctitle=737368643A20636F7265205B707269765D [ 214.791607] audit: type=1105 audit(1757722044.563:1750): pid=6970 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 214.808243] audit: type=1103 audit(1757722044.576:1751): pid=6972 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.102294] audit: type=1106 audit(1757722044.874:1752): pid=6970 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.123206] audit: type=1104 audit(1757722044.875:1753): pid=6970 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 228.630717] kauditd_printk_skb: 1 callbacks suppressed [ 228.630721] audit: type=1334 audit(1757722058.402:1755): prog-id=83 op=UNLOAD [ 228.638327] audit: type=1334 audit(1757722058.402:1756): prog-id=108 op=UNLOAD [ 228.649562] audit: type=1334 audit(1757722058.421:1757): prog-id=124 op=UNLOAD [ 228.655065] audit: type=1334 audit(1757722058.427:1758): prog-id=127 op=UNLOAD [ 229.842399] audit: type=1400 audit(1757722059.613:1759): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 229.850971] audit: type=1400 audit(1757722059.621:1760): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 229.858580] audit: type=1400 audit(1757722059.621:1761): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 229.866380] audit: type=1400 audit(1757722059.621:1762): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 229.875103] audit: type=1400 audit(1757722059.621:1763): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 229.883419] audit: type=1400 audit(1757722059.621:1764): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.396018] kauditd_printk_skb: 57 callbacks suppressed [ 235.396024] audit: type=1334 audit(1757722065.167:1779): prog-id=87 op=UNLOAD [ 235.400826] audit: type=1334 audit(1757722065.167:1780): prog-id=91 op=UNLOAD [ 235.850749] audit: type=1400 audit(1757722065.622:1781): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.858142] audit: type=1400 audit(1757722065.625:1782): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.866280] audit: type=1400 audit(1757722065.625:1783): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.874363] audit: type=1400 audit(1757722065.625:1784): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.882315] audit: type=1400 audit(1757722065.625:1785): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.891792] audit: type=1400 audit(1757722065.625:1786): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.903927] audit: type=1400 audit(1757722065.625:1787): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 235.912081] audit: type=1400 audit(1757722065.625:1788): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0