821615] audit: type=1400 audit(1761957611.570:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 55.829543] audit: type=1400 audit(1761957611.570:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 55.830549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.897043] kauditd_printk_skb: 215 callbacks suppressed [ 57.897046] audit: type=1400 audit(1761957613.667:461): avc: denied { mac_admin } for pid=2280 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.907695] audit: type=1401 audit(1761957613.667:461): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 57.911205] audit: type=1300 audit(1761957613.667:461): arch=c000003e syscall=188 success=no exit=-22 a0=c0006ecc30 a1=c000a17b30 a2=c0006ecc00 a3=25 items=0 ppid=1 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.919413] audit: type=1327 audit(1761957613.667:461): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 58.996935] audit: type=1400 audit(1761957614.767:462): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 59.005238] audit: type=1400 audit(1761957614.767:463): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 59.013270] audit: type=1400 audit(1761957614.767:464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 59.023069] audit: type=1400 audit(1761957614.767:465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 59.030557] audit: type=1400 audit(1761957614.767:466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 59.038926] audit: type=1400 audit(1761957614.767:467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 64.632411] kauditd_printk_skb: 342 callbacks suppressed [ 64.632416] audit: type=1400 audit(1761957620.403:572): avc: denied { watch } for pid=2465 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.643267] audit: type=1300 audit(1761957620.403:572): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0042755f0 a2=fc6 a3=0 items=0 ppid=2321 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 key=(null) [ 64.673752] audit: type=1327 audit(1761957620.403:572): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31392E313930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 64.686652] audit: type=1400 audit(1761957620.403:573): avc: denied { watch } for pid=2465 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=524008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.713217] audit: type=1300 audit(1761957620.403:573): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004275650 a2=fc6 a3=0 items=0 ppid=2321 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 key=(null) [ 64.726294] audit: type=1327 audit(1761957620.403:573): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31392E313930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 64.737551] audit: type=1400 audit(1761957620.403:574): avc: denied { watch } for pid=2465 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 64.746920] audit: type=1300 audit(1761957620.403:574): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0050a2740 a2=fc6 a3=0 items=0 ppid=2321 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 key=(null) [ 64.759450] audit: type=1327 audit(1761957620.403:574): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31392E313930002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 64.770841] audit: type=1400 audit(1761957620.414:575): avc: denied { watch } for pid=2465 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=524014 scontext=system_u:system_r:svirt_lxc_net_t:s0:c313,c748 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 70.769269] kauditd_printk_skb: 268 callbacks suppressed [ 70.769272] audit: type=1130 audit(1761957626.538:828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 71.066129] audit: type=1400 audit(1761957626.836:829): avc: denied { mac_admin } for pid=2730 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.075252] audit: type=1401 audit(1761957626.836:829): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.080015] audit: type=1300 audit(1761957626.836:829): arch=c000003e syscall=188 success=no exit=-22 a0=c00012fec0 a1=c000af56c8 a2=c00012fe90 a3=25 items=0 ppid=1 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.091567] audit: type=1327 audit(1761957626.836:829): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 71.101661] audit: type=1400 audit(1761957626.836:830): avc: denied { mac_admin } for pid=2730 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 71.110071] audit: type=1401 audit(1761957626.836:830): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 71.115533] audit: type=1300 audit(1761957626.836:830): arch=c000003e syscall=188 success=no exit=-22 a0=c00094b380 a1=c000af56e0 a2=c00012ffb0 a3=25 items=0 ppid=1 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.128047] audit: type=1327 audit(1761957626.836:830): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 71.272759] audit: type=1400 audit(1761957627.043:831): avc: denied { mac_admin } for pid=2730 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.810018] kauditd_printk_skb: 313 callbacks suppressed [ 76.810022] audit: type=1400 audit(1761957632.580:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.818413] audit: type=1400 audit(1761957632.580:926): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.825214] audit: type=1400 audit(1761957632.580:927): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.832147] audit: type=1400 audit(1761957632.580:928): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.838877] audit: type=1400 audit(1761957632.580:929): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.845823] audit: type=1400 audit(1761957632.580:930): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.852923] audit: type=1400 audit(1761957632.580:931): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.861620] audit: type=1400 audit(1761957632.580:932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.870945] audit: type=1400 audit(1761957632.580:933): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 76.879271] audit: type=1400 audit(1761957632.580:934): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 83.981725] kauditd_printk_skb: 47 callbacks suppressed [ 83.981728] audit: type=1325 audit(1761957639.752:943): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 83.994006] audit: type=1300 audit(1761957639.752:943): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc20a9a60 a2=0 a3=7ffcc20a9a4c items=0 ppid=2837 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.009014] audit: type=1327 audit(1761957639.752:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 84.017054] audit: type=1325 audit(1761957639.780:944): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 84.022721] audit: type=1300 audit(1761957639.780:944): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc20a9a60 a2=0 a3=0 items=0 ppid=2837 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.034455] audit: type=1327 audit(1761957639.780:944): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 84.054505] audit: type=1325 audit(1761957639.825:945): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 84.061178] audit: type=1300 audit(1761957639.825:945): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc64705f30 a2=0 a3=7ffc64705f1c items=0 ppid=2837 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.077006] audit: type=1327 audit(1761957639.825:945): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 84.089055] audit: type=1325 audit(1761957639.859:946): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.329708] kauditd_printk_skb: 19 callbacks suppressed [ 89.329711] audit: type=1325 audit(1761957645.100:956): table=filter:97 family=2 entries=19 op=nft_register_rule pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.339056] audit: type=1300 audit(1761957645.100:956): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe66ddbb50 a2=0 a3=7ffe66ddbb3c items=0 ppid=2837 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.351269] audit: type=1327 audit(1761957645.100:956): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 89.360807] audit: type=1325 audit(1761957645.131:957): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.367467] audit: type=1300 audit(1761957645.131:957): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe66ddbb50 a2=0 a3=0 items=0 ppid=2837 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.380358] audit: type=1327 audit(1761957645.131:957): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 91.037747] audit: type=1325 audit(1761957646.808:958): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 91.119320] audit: type=1300 audit(1761957646.808:958): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffb7d9a790 a2=0 a3=7fffb7d9a77c items=0 ppid=2837 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 91.132923] audit: type=1327 audit(1761957646.808:958): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 91.143627] audit: type=1325 audit(1761957646.891:959): table=nat:100 family=2 entries=12 op=nft_register_rule pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.951802] kauditd_printk_skb: 172 callbacks suppressed [ 96.951805] audit: type=1400 audit(1761957652.722:1007): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.961641] audit: type=1400 audit(1761957652.722:1008): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.969088] audit: type=1400 audit(1761957652.722:1009): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.977965] audit: type=1400 audit(1761957652.722:1010): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.985595] audit: type=1400 audit(1761957652.722:1011): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.991976] audit: type=1400 audit(1761957652.722:1012): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 96.998807] audit: type=1400 audit(1761957652.722:1013): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 97.008170] audit: type=1400 audit(1761957652.722:1014): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 97.018606] audit: type=1400 audit(1761957652.722:1015): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 97.031107] audit: type=1400 audit(1761957652.725:1016): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.747878] kauditd_printk_skb: 53 callbacks suppressed [ 106.747881] audit: type=1400 audit(1761957662.518:1027): avc: denied { perfmon } for pid=3365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.768261] audit: type=1300 audit(1761957662.518:1027): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fbaa4348848 items=0 ppid=3178 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.781188] audit: type=1327 audit(1761957662.518:1027): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535353236306632333638643532636634646533653561343034363331 [ 106.791325] audit: type=1400 audit(1761957662.518:1028): avc: denied { bpf } for pid=3365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.799427] audit: type=1400 audit(1761957662.518:1028): avc: denied { bpf } for pid=3365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.819899] audit: type=1400 audit(1761957662.518:1028): avc: denied { bpf } for pid=3365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.829744] audit: type=1400 audit(1761957662.518:1028): avc: denied { perfmon } for pid=3365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.850868] audit: type=1400 audit(1761957662.518:1028): avc: denied { perfmon } for pid=3365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.878046] audit: type=1400 audit(1761957662.518:1028): avc: denied { perfmon } for pid=3365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 106.886387] audit: type=1400 audit(1761957662.518:1028): avc: denied { perfmon } for pid=3365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.518123] kauditd_printk_skb: 34 callbacks suppressed [ 119.518126] audit: type=1400 audit(1761957675.289:1034): avc: denied { perfmon } for pid=3838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.529589] audit: type=1300 audit(1761957675.289:1034): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f3dbcc7b0a8 items=0 ppid=3178 pid=3838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.545296] audit: type=1327 audit(1761957675.289:1034): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265646531313534313132653738366131643166366631613565373732 [ 119.555944] audit: type=1400 audit(1761957675.289:1035): avc: denied { bpf } for pid=3838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.564009] audit: type=1400 audit(1761957675.289:1035): avc: denied { bpf } for pid=3838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.572043] audit: type=1400 audit(1761957675.289:1035): avc: denied { bpf } for pid=3838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.580005] audit: type=1400 audit(1761957675.289:1035): avc: denied { perfmon } for pid=3838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.587452] audit: type=1400 audit(1761957675.289:1035): avc: denied { perfmon } for pid=3838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.595453] audit: type=1400 audit(1761957675.289:1035): avc: denied { perfmon } for pid=3838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 119.604342] audit: type=1400 audit(1761957675.289:1035): avc: denied { perfmon } for pid=3838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 120.357329] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 120.368017] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 121.891119] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.893314] IPv6: ADDRCONF(NETDEV_CHANGE): cali1ad4a802638: link becomes ready [ 122.371776] IPv6: ADDRCONF(NETDEV_CHANGE): cali77edb459b4b: link becomes ready [ 122.750611] IPv6: ADDRCONF(NETDEV_CHANGE): calid8d10140e55: link becomes ready [ 123.596388] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.599344] IPv6: ADDRCONF(NETDEV_CHANGE): cali59445e29506: link becomes ready [ 124.542590] kauditd_printk_skb: 770 callbacks suppressed [ 124.542593] audit: type=1400 audit(1761957680.313:1216): avc: denied { bpf } for pid=4499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.548659] audit: type=1400 audit(1761957680.313:1216): avc: denied { bpf } for pid=4499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.553519] audit: type=1400 audit(1761957680.313:1216): avc: denied { perfmon } for pid=4499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.557943] audit: type=1400 audit(1761957680.313:1216): avc: denied { perfmon } for pid=4499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.565524] audit: type=1400 audit(1761957680.313:1216): avc: denied { perfmon } for pid=4499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.578143] audit: type=1400 audit(1761957680.313:1216): avc: denied { perfmon } for pid=4499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.591727] audit: type=1400 audit(1761957680.313:1216): avc: denied { perfmon } for pid=4499 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.596242] audit: type=1400 audit(1761957680.313:1216): avc: denied { bpf } for pid=4499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.603737] audit: type=1400 audit(1761957680.313:1216): avc: denied { bpf } for pid=4499 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.608228] audit: audit_backlog=65 > audit_backlog_limit=64 This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:20 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: [ 124.906203] IPv6: ADDRCONF(NETDEV_CHANGE): calie44bb1af7d5: link becomes ready [ 125.028539] IPv6: ADDRCONF(NETDEV_CHANGE): calic77b6520130: link becomes ready This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:21 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: [ 125.942006] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 125.943422] IPv6: ADDRCONF(NETDEV_CHANGE): calic7bf51b43f3: link becomes ready This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:22 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: [ 126.845534] IPv6: ADDRCONF(NETDEV_CHANGE): cali4cd743c72ea: link becomes ready This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:23 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: [ 127.897061] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 127.898914] IPv6: ADDRCONF(NETDEV_CHANGE): cali3a614cfa06a: link becomes ready This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:24 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:25 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: This is ip-172-31-19-190 (Linux x86_64 5.15.192-flatcar) 00:41:26 SSH host key: SHA256:byk1oYIeaLMi7dna7/8SUS6RSHtY11j2s3h0CdxLcnQ (ED25519) SSH host key: SHA256:KSdBODfjmums+Ef7rMqg2jeD0ZvaR77rdZ6/SbtcwiI (RSA) SSH host key: SHA256:ACoANgJreTDjsGa2OZPaqOYVlHXpRwoumFZsyWYJ7hg (ECDSA) eth0: 172.31.19.190 fe80::42d:3aff:fe09:1d11 ip-172-31-19-190 login: [ 132.430344] kauditd_printk_skb: 555 callbacks suppressed [ 132.430347] audit: type=1130 audit(1761957688.201:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.19.190:22-147.75.109.163:56834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 132.691891] audit: type=1101 audit(1761957688.463:1389): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.700720] audit: type=1103 audit(1761957688.471:1390): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.709016] audit: type=1006 audit(1761957688.471:1391): pid=5274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 132.712734] audit: type=1300 audit(1761957688.471:1391): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc095c2e50 a2=3 a3=0 items=0 ppid=1 pid=5274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 132.720725] audit: type=1327 audit(1761957688.471:1391): proctitle=737368643A20636F7265205B707269765D [ 132.725141] audit: type=1105 audit(1761957688.496:1392): pid=5274 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 132.736844] audit: type=1103 audit(1761957688.507:1393): pid=5301 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 133.306622] audit: type=1106 audit(1761957689.078:1394): pid=5274 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 133.320006] audit: type=1104 audit(1761957689.078:1395): pid=5274 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 138.335424] kauditd_printk_skb: 7 callbacks suppressed [ 138.335426] audit: type=1130 audit(1761957694.106:1399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.19.190:22-147.75.109.163:59902 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.540848] audit: type=1101 audit(1761957694.313:1400): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 138.554167] audit: type=1103 audit(1761957694.324:1401): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 138.573214] audit: type=1006 audit(1761957694.324:1402): pid=5488 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 138.581982] audit: type=1300 audit(1761957694.324:1402): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc87cf3cc0 a2=3 a3=0 items=0 ppid=1 pid=5488 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.593197] audit: type=1327 audit(1761957694.324:1402): proctitle=737368643A20636F7265205B707269765D [ 138.597064] audit: type=1105 audit(1761957694.357:1403): pid=5488 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 138.608402] audit: type=1103 audit(1761957694.364:1404): pid=5490 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 138.881845] audit: type=1130 audit(1761957694.653:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.19.190:22-147.75.109.163:59916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 138.903035] audit: type=1106 audit(1761957694.670:1406): pid=5488 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 144.856688] kauditd_printk_skb: 23 callbacks suppressed [ 144.856704] audit: type=1130 audit(1761957700.628:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.19.190:22-147.75.109.163:57906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.035818] audit: type=1101 audit(1761957700.807:1427): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.046363] audit: type=1103 audit(1761957700.817:1428): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.058146] audit: type=1006 audit(1761957700.817:1429): pid=5526 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 145.068145] audit: type=1300 audit(1761957700.817:1429): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe253b3a0 a2=3 a3=0 items=0 ppid=1 pid=5526 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.082694] audit: type=1327 audit(1761957700.817:1429): proctitle=737368643A20636F7265205B707269765D [ 145.087598] audit: type=1105 audit(1761957700.853:1430): pid=5526 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.097990] audit: type=1103 audit(1761957700.855:1431): pid=5530 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.327854] audit: type=1106 audit(1761957701.099:1432): pid=5526 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 145.341696] audit: type=1104 audit(1761957701.099:1433): pid=5526 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.358194] kauditd_printk_skb: 1 callbacks suppressed [ 150.358198] audit: type=1130 audit(1761957706.129:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.19.190:22-147.75.109.163:57908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.536832] audit: type=1101 audit(1761957706.308:1436): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.548997] audit: type=1103 audit(1761957706.321:1437): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.558384] audit: type=1006 audit(1761957706.321:1438): pid=5546 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 150.565835] audit: type=1300 audit(1761957706.321:1438): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffab530cd0 a2=3 a3=0 items=0 ppid=1 pid=5546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.575182] audit: type=1327 audit(1761957706.321:1438): proctitle=737368643A20636F7265205B707269765D [ 150.597542] audit: type=1105 audit(1761957706.369:1439): pid=5546 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.617347] audit: type=1103 audit(1761957706.380:1440): pid=5548 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.943317] audit: type=1106 audit(1761957706.714:1441): pid=5546 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 150.955076] audit: type=1104 audit(1761957706.718:1442): pid=5546 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 155.964941] kauditd_printk_skb: 1 callbacks suppressed [ 155.964955] audit: type=1130 audit(1761957711.736:1444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.19.190:22-147.75.109.163:46592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.220832] audit: type=1101 audit(1761957711.992:1445): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.235370] audit: type=1103 audit(1761957712.003:1446): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.244464] audit: type=1006 audit(1761957712.003:1447): pid=5580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 156.251800] audit: type=1300 audit(1761957712.003:1447): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff73110350 a2=3 a3=0 items=0 ppid=1 pid=5580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.265272] audit: type=1327 audit(1761957712.003:1447): proctitle=737368643A20636F7265205B707269765D [ 156.281804] audit: type=1105 audit(1761957712.053:1448): pid=5580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.293184] audit: type=1103 audit(1761957712.057:1449): pid=5583 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.747664] audit: type=1106 audit(1761957712.519:1450): pid=5580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 156.775546] audit: type=1104 audit(1761957712.519:1451): pid=5580 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.777071] kauditd_printk_skb: 1 callbacks suppressed [ 161.777074] audit: type=1130 audit(1761957717.548:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.19.190:22-147.75.109.163:46604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.966066] audit: type=1101 audit(1761957717.737:1454): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.976090] audit: type=1103 audit(1761957717.747:1455): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 161.989782] audit: type=1006 audit(1761957717.748:1456): pid=5593 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 161.997123] audit: type=1300 audit(1761957717.748:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd28f23a00 a2=3 a3=0 items=0 ppid=1 pid=5593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.005729] audit: type=1327 audit(1761957717.748:1456): proctitle=737368643A20636F7265205B707269765D [ 162.008912] audit: type=1105 audit(1761957717.767:1457): pid=5593 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.017201] audit: type=1103 audit(1761957717.770:1458): pid=5595 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.261382] audit: type=1106 audit(1761957718.033:1459): pid=5593 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 162.277660] audit: type=1104 audit(1761957718.033:1460): pid=5593 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.388433] kauditd_printk_skb: 57 callbacks suppressed [ 171.388438] audit: type=1130 audit(1761957727.160:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.19.190:22-147.75.109.163:33148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.559938] audit: type=1101 audit(1761957727.331:1503): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.570744] audit: type=1103 audit(1761957727.341:1504): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.580324] audit: type=1006 audit(1761957727.341:1505): pid=5666 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 171.585892] audit: type=1300 audit(1761957727.341:1505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3b8490d0 a2=3 a3=0 items=0 ppid=1 pid=5666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.593882] audit: type=1327 audit(1761957727.341:1505): proctitle=737368643A20636F7265205B707269765D [ 171.607610] audit: type=1105 audit(1761957727.379:1506): pid=5666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.620516] audit: type=1103 audit(1761957727.392:1507): pid=5668 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.944660] audit: type=1106 audit(1761957727.716:1508): pid=5666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 171.958961] audit: type=1104 audit(1761957727.716:1509): pid=5666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 176.975888] kauditd_printk_skb: 7 callbacks suppressed [ 176.975891] audit: type=1130 audit(1761957732.747:1513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.19.190:22-147.75.109.163:56536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.143979] audit: type=1101 audit(1761957732.915:1514): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.155665] audit: type=1103 audit(1761957732.916:1515): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.164613] audit: type=1006 audit(1761957732.916:1516): pid=5679 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 177.171344] audit: type=1300 audit(1761957732.916:1516): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1fbc13e0 a2=3 a3=0 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.187926] audit: type=1327 audit(1761957732.916:1516): proctitle=737368643A20636F7265205B707269765D [ 177.200363] audit: type=1105 audit(1761957732.972:1517): pid=5679 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.214285] audit: type=1103 audit(1761957732.984:1518): pid=5681 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.457660] audit: type=1106 audit(1761957733.229:1519): pid=5679 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 177.469367] audit: type=1104 audit(1761957733.229:1520): pid=5679 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 182.198046] kauditd_printk_skb: 1 callbacks suppressed [ 182.198050] audit: type=1400 audit(1761957737.969:1522): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 182.213388] audit: type=1300 audit(1761957737.969:1522): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00043fc00 a2=fc6 a3=0 items=0 ppid=2356 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 key=(null) [ 182.225142] audit: type=1327 audit(1761957737.969:1522): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 182.236172] audit: type=1400 audit(1761957737.981:1523): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=524012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 182.246682] audit: type=1300 audit(1761957737.981:1523): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ce7d10 a2=fc6 a3=0 items=0 ppid=2356 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 key=(null) [ 182.258967] audit: type=1327 audit(1761957737.981:1523): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 182.488235] audit: type=1130 audit(1761957738.260:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.19.190:22-147.75.109.163:56540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.732970] audit: type=1101 audit(1761957738.502:1525): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 182.744678] audit: type=1103 audit(1761957738.504:1526): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 182.756193] audit: type=1006 audit(1761957738.504:1527): pid=5712 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 187.483309] kauditd_printk_skb: 25 callbacks suppressed [ 187.483313] audit: type=1400 audit(1761957743.255:1539): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 187.502200] audit: type=1400 audit(1761957743.256:1540): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 187.516199] audit: type=1300 audit(1761957743.256:1540): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000077fa0 a2=fc6 a3=0 items=0 ppid=2356 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 key=(null) [ 187.535197] audit: type=1327 audit(1761957743.256:1540): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 187.550214] audit: type=1300 audit(1761957743.255:1539): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000374060 a2=fc6 a3=0 items=0 ppid=2356 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 key=(null) [ 187.567198] audit: type=1327 audit(1761957743.255:1539): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 187.582204] audit: type=1400 audit(1761957743.302:1541): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 187.595197] audit: type=1300 audit(1761957743.302:1541): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007e21c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 key=(null) [ 187.611197] audit: type=1327 audit(1761957743.302:1541): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 187.622866] audit: type=1400 audit(1761957743.302:1542): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=524006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c57,c776 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.020308] kauditd_printk_skb: 13 callbacks suppressed [ 194.020311] audit: type=1130 audit(1761957749.792:1552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.19.190:22-147.75.109.163:32798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.226897] audit: type=1101 audit(1761957749.998:1553): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.239835] audit: type=1103 audit(1761957750.008:1554): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.255830] audit: type=1006 audit(1761957750.008:1555): pid=5737 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 194.265114] audit: type=1300 audit(1761957750.008:1555): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc62ed5fb0 a2=3 a3=0 items=0 ppid=1 pid=5737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.284163] audit: type=1327 audit(1761957750.008:1555): proctitle=737368643A20636F7265205B707269765D [ 194.289316] audit: type=1105 audit(1761957750.043:1556): pid=5737 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.301272] audit: type=1103 audit(1761957750.047:1557): pid=5739 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.628998] audit: type=1106 audit(1761957750.397:1558): pid=5737 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 194.640716] audit: type=1104 audit(1761957750.398:1559): pid=5737 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.654906] kauditd_printk_skb: 1 callbacks suppressed [ 199.654909] audit: type=1130 audit(1761957755.426:1561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.19.190:22-147.75.109.163:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 199.894572] audit: type=1101 audit(1761957755.666:1562): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.909378] audit: type=1103 audit(1761957755.678:1563): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.930324] audit: type=1006 audit(1761957755.678:1564): pid=5752 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 199.940236] audit: type=1300 audit(1761957755.678:1564): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6bb13a30 a2=3 a3=0 items=0 ppid=1 pid=5752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.956142] audit: type=1327 audit(1761957755.678:1564): proctitle=737368643A20636F7265205B707269765D [ 199.963202] audit: type=1105 audit(1761957755.709:1565): pid=5752 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 199.979154] audit: type=1103 audit(1761957755.712:1566): pid=5754 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.405969] audit: type=1106 audit(1761957756.177:1567): pid=5752 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' [ 200.420154] audit: type=1104 audit(1761957756.185:1568): pid=5752 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success'