t:s0 tclass=file permissive=0 [ 65.846549] audit: type=1300 audit(1755043350.606:479): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007f8300 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 65.859839] audit: type=1327 audit(1755043350.606:479): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 65.875547] audit: type=1400 audit(1755043350.619:480): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 65.889547] audit: type=1300 audit(1755043350.619:480): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400073b080 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 65.903766] audit: type=1327 audit(1755043350.619:480): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.161871] audit: type=1400 audit(1755043352.939:481): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 68.177334] audit: type=1300 audit(1755043352.939:481): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a5c6e0 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 68.197440] audit: type=1327 audit(1755043352.939:481): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 68.211977] audit: type=1400 audit(1755043352.952:482): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 74.315500] kauditd_printk_skb: 269 callbacks suppressed [ 74.315504] audit: type=1400 audit(1755043359.092:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.325438] audit: type=1400 audit(1755043359.092:736): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.333241] audit: type=1400 audit(1755043359.092:737): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.345568] audit: type=1400 audit(1755043359.092:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.353826] audit: type=1400 audit(1755043359.092:739): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.363193] audit: type=1400 audit(1755043359.092:740): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.371492] audit: type=1400 audit(1755043359.092:741): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.385567] audit: type=1400 audit(1755043359.092:742): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.399537] audit: type=1400 audit(1755043359.092:743): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.407232] audit: type=1400 audit(1755043359.092:744): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.934940] kauditd_printk_skb: 357 callbacks suppressed [ 85.934947] audit: type=1106 audit(1755043370.710:846): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.952808] audit: type=1104 audit(1755043370.710:847): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.974686] audit: type=1106 audit(1755043370.749:848): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 85.991724] audit: type=1104 audit(1755043370.749:849): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 86.002200] audit: type=1131 audit(1755043370.767:850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.163:22-139.178.89.65:37698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.808602] audit: type=1325 audit(1755043373.585:851): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.817170] audit: type=1300 audit(1755043373.585:851): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.838711] audit: type=1327 audit(1755043373.585:851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.848770] audit: type=1325 audit(1755043373.609:852): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.857758] audit: type=1300 audit(1755043373.609:852): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.147761] kauditd_printk_skb: 7 callbacks suppressed [ 96.147766] audit: type=1325 audit(1755043380.925:855): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.158801] audit: type=1300 audit(1755043380.925:855): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.177084] audit: type=1327 audit(1755043380.925:855): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.185717] audit: type=1325 audit(1755043380.962:856): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.200982] audit: type=1300 audit(1755043380.962:856): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.219011] audit: type=1327 audit(1755043380.962:856): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.251717] audit: type=1325 audit(1755043381.028:857): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.258624] audit: type=1300 audit(1755043381.028:857): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd365e7e0 a2=0 a3=1 items=0 ppid=2885 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.273636] audit: type=1327 audit(1755043381.028:857): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.284579] audit: type=1325 audit(1755043381.061:858): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.231273] kauditd_printk_skb: 178 callbacks suppressed [ 101.231277] audit: type=1400 audit(1755043386.008:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.241708] audit: type=1400 audit(1755043386.012:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.250347] audit: type=1400 audit(1755043386.012:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.258188] audit: type=1400 audit(1755043386.012:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.267007] audit: type=1400 audit(1755043386.012:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.275558] audit: type=1400 audit(1755043386.012:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.284359] audit: type=1400 audit(1755043386.012:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.292839] audit: type=1400 audit(1755043386.012:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.301200] audit: type=1400 audit(1755043386.012:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.308988] audit: type=1400 audit(1755043386.018:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.329258] kauditd_printk_skb: 97 callbacks suppressed [ 116.329263] audit: type=1400 audit(1755043401.106:935): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.339624] audit: type=1300 audit(1755043401.106:935): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.354726] audit: type=1327 audit(1755043401.106:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 [ 116.365699] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.375272] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.383610] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.392309] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.401515] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.415144] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.423731] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.734057] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 116.737217] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 118.253094] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 118.255664] IPv6: ADDRCONF(NETDEV_CHANGE): cali368090c52a0: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:25 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 121.036018] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.038551] IPv6: ADDRCONF(NETDEV_CHANGE): calibcc2aaccf11: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:26 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:27 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 123.108811] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.111299] IPv6: ADDRCONF(NETDEV_CHANGE): cali1b5898b3b3b: link becomes ready [ 123.415979] IPv6: ADDRCONF(NETDEV_CHANGE): cali74d398590f2: link becomes ready [ 123.528317] kauditd_printk_skb: 767 callbacks suppressed [ 123.528322] audit: type=1325 audit(1755043408.304:1106): table=filter:110 family=2 entries=41 op=nft_register_chain pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 123.539038] audit: type=1300 audit(1755043408.304:1106): arch=c00000b7 syscall=211 success=yes exit=23076 a0=3 a1=ffffd0a22bb0 a2=0 a3=ffffa5d11fa8 items=0 ppid=3947 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.561769] audit: type=1327 audit(1755043408.304:1106): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:28 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 123.942721] audit: type=1400 audit(1755043408.720:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.953162] audit: type=1400 audit(1755043408.720:1108): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.968453] audit: type=1400 audit(1755043408.720:1109): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.981428] audit: type=1400 audit(1755043408.720:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.991019] audit: type=1400 audit(1755043408.720:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.004142] audit: type=1400 audit(1755043408.720:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.015410] audit: type=1400 audit(1755043408.720:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.038481] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 125.040964] IPv6: ADDRCONF(NETDEV_CHANGE): cali175c2371b1f: link becomes ready [ 125.430782] IPv6: ADDRCONF(NETDEV_CHANGE): califd293d2407a: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:30 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 125.775507] IPv6: ADDRCONF(NETDEV_CHANGE): cali9673a742af4: link becomes ready [ 126.169581] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 126.172074] IPv6: ADDRCONF(NETDEV_CHANGE): cali8cfbacaf637: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:31 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:32 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:33 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 128.972924] kauditd_printk_skb: 575 callbacks suppressed [ 128.972929] audit: type=1325 audit(1755043413.750:1292): table=filter:120 family=2 entries=13 op=nft_register_rule pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.981449] audit: type=1300 audit(1755043413.750:1292): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.993882] audit: type=1327 audit(1755043413.750:1292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 129.250355] audit: type=1325 audit(1755043413.951:1293): table=nat:121 family=2 entries=27 op=nft_register_chain pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 129.278781] audit: type=1130 audit(1755043414.056:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.163:22-139.178.89.65:60960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 129.294166] audit: type=1300 audit(1755043413.951:1293): arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.316894] audit: type=1327 audit(1755043413.951:1293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 129.490725] audit: type=1101 audit(1755043414.268:1295): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.510374] audit: type=1103 audit(1755043414.270:1296): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.538389] audit: type=1006 audit(1755043414.270:1297): pid=4957 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:34 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 134.276311] kauditd_printk_skb: 127 callbacks suppressed [ 134.276316] audit: type=1325 audit(1755043419.053:1341): table=filter:124 family=2 entries=12 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.285822] audit: type=1300 audit(1755043419.053:1341): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.302552] audit: type=1327 audit(1755043419.053:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.315870] audit: type=1325 audit(1755043419.091:1342): table=nat:125 family=2 entries=22 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.324866] audit: type=1300 audit(1755043419.091:1342): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.344960] audit: type=1327 audit(1755043419.091:1342): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.403107] audit: type=1325 audit(1755043419.180:1343): table=filter:126 family=2 entries=12 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.411409] audit: type=1300 audit(1755043419.180:1343): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff0659ae0 a2=0 a3=1 items=0 ppid=2885 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.450645] audit: type=1327 audit(1755043419.180:1343): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.466483] audit: type=1325 audit(1755043419.243:1344): table=nat:127 family=2 entries=22 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 140.842205] kauditd_printk_skb: 113 callbacks suppressed [ 140.842211] audit: type=1130 audit(1755043425.618:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.163:22-139.178.89.65:40278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.061036] audit: type=1101 audit(1755043425.838:1379): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.073765] audit: type=1103 audit(1755043425.840:1380): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.085642] audit: type=1006 audit(1755043425.840:1381): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 141.100905] audit: type=1300 audit(1755043425.840:1381): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff699bf50 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.116525] audit: type=1327 audit(1755043425.840:1381): proctitle=737368643A20636F7265205B707269765D [ 141.135522] audit: type=1105 audit(1755043425.913:1382): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.150470] audit: type=1103 audit(1755043425.916:1383): pid=5563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.582015] audit: type=1106 audit(1755043426.359:1384): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.606046] audit: type=1104 audit(1755043426.360:1385): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.934253] kauditd_printk_skb: 138 callbacks suppressed [ 146.934258] audit: type=1400 audit(1755043431.711:1434): avc: denied { watch } for pid=5222 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.3757813382/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c92,c508 tclass=file permissive=0 [ 146.951631] audit: type=1300 audit(1755043431.711:1434): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000636280 a2=fc6 a3=0 items=0 ppid=4206 pid=5222 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 key=(null) [ 146.965251] audit: type=1327 audit(1755043431.711:1434): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 147.119535] audit: type=1325 audit(1755043431.896:1435): table=filter:132 family=2 entries=10 op=nft_register_rule pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.126989] audit: type=1300 audit(1755043431.896:1435): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.145476] audit: type=1327 audit(1755043431.896:1435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 147.162130] audit: type=1325 audit(1755043431.939:1436): table=nat:133 family=2 entries=36 op=nft_register_chain pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.168556] audit: type=1300 audit(1755043431.939:1436): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.181296] audit: type=1327 audit(1755043431.939:1436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 148.153836] audit: type=1130 audit(1755043432.931:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.163:22-139.178.89.65:36958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.724576] kauditd_printk_skb: 10 callbacks suppressed [ 153.724581] audit: type=1130 audit(1755043438.502:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.163:22-139.178.89.65:36972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.925024] audit: type=1101 audit(1755043438.702:1447): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.937859] audit: type=1103 audit(1755043438.713:1448): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.949460] audit: type=1006 audit(1755043438.713:1449): pid=5758 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 153.957069] audit: type=1300 audit(1755043438.713:1449): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc8a2740 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.969208] audit: type=1327 audit(1755043438.713:1449): proctitle=737368643A20636F7265205B707269765D [ 153.996641] audit: type=1105 audit(1755043438.773:1450): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.010072] audit: type=1103 audit(1755043438.787:1451): pid=5760 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.332083] audit: type=1106 audit(1755043439.107:1452): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.345753] audit: type=1104 audit(1755043439.108:1453): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.366515] kauditd_printk_skb: 1 callbacks suppressed [ 159.366519] audit: type=1130 audit(1755043444.144:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.163:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.558955] audit: type=1101 audit(1755043444.335:1456): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.574365] audit: type=1103 audit(1755043444.348:1457): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.586025] audit: type=1006 audit(1755043444.348:1458): pid=5770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 159.593563] audit: type=1300 audit(1755043444.348:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b4b660 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.604785] audit: type=1327 audit(1755043444.348:1458): proctitle=737368643A20636F7265205B707269765D [ 159.618716] audit: type=1105 audit(1755043444.394:1459): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.634391] audit: type=1103 audit(1755043444.410:1460): pid=5772 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.952629] audit: type=1106 audit(1755043444.728:1461): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.965712] audit: type=1104 audit(1755043444.728:1462): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.979184] kauditd_printk_skb: 1 callbacks suppressed [ 164.979190] audit: type=1130 audit(1755043449.756:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.163:22-139.178.89.65:45832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.175469] audit: type=1101 audit(1755043449.953:1465): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.190513] audit: type=1103 audit(1755043449.964:1466): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.205780] audit: type=1006 audit(1755043449.964:1467): pid=5788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 165.214110] audit: type=1300 audit(1755043449.964:1467): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95f8c0 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.239676] audit: type=1327 audit(1755043449.964:1467): proctitle=737368643A20636F7265205B707269765D [ 165.246206] audit: type=1105 audit(1755043450.006:1468): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.262204] audit: type=1103 audit(1755043450.011:1469): pid=5792 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.559922] audit: type=1106 audit(1755043450.335:1470): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.576581] audit: type=1104 audit(1755043450.336:1471): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.586209] kauditd_printk_skb: 7 callbacks suppressed [ 170.586214] audit: type=1130 audit(1755043455.364:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.163:22-139.178.89.65:45846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.779385] audit: type=1101 audit(1755043455.557:1476): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.794548] audit: type=1103 audit(1755043455.569:1477): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.812189] audit: type=1006 audit(1755043455.569:1478): pid=5844 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 170.818550] audit: type=1300 audit(1755043455.569:1478): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdadd9270 a2=3 a3=1 items=0 ppid=1 pid=5844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.829933] audit: type=1327 audit(1755043455.569:1478): proctitle=737368643A20636F7265205B707269765D [ 170.836972] audit: type=1105 audit(1755043455.609:1479): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.849813] audit: type=1103 audit(1755043455.613:1480): pid=5846 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.187021] audit: type=1106 audit(1755043455.964:1481): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.199383] audit: type=1104 audit(1755043455.964:1482): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.580433] kauditd_printk_skb: 20 callbacks suppressed [ 176.580438] audit: type=1106 audit(1755043461.358:1499): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.610385] audit: type=1104 audit(1755043461.358:1500): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.632199] audit: type=1131 audit(1755043461.385:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.163:22-139.178.89.65:45862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.642231] audit: type=1130 audit(1755043461.406:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.163:22-139.178.89.65:45960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.708676] audit: type=1325 audit(1755043461.486:1503): table=filter:136 family=2 entries=20 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.715305] audit: type=1300 audit(1755043461.486:1503): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.730933] audit: type=1327 audit(1755043461.486:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.744244] audit: type=1325 audit(1755043461.521:1504): table=nat:137 family=2 entries=26 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.751363] audit: type=1300 audit(1755043461.521:1504): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.767172] audit: type=1327 audit(1755043461.521:1504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 183.170496] kauditd_printk_skb: 27 callbacks suppressed [ 183.170501] audit: type=1130 audit(1755043467.948:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.163:22-139.178.89.65:45970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.356291] audit: type=1101 audit(1755043468.134:1525): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.369745] audit: type=1103 audit(1755043468.147:1526): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.383025] audit: type=1006 audit(1755043468.147:1527): pid=5928 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 183.391035] audit: type=1300 audit(1755043468.147:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b88d40 a2=3 a3=1 items=0 ppid=1 pid=5928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.402725] audit: type=1327 audit(1755043468.147:1527): proctitle=737368643A20636F7265205B707269765D [ 183.420649] audit: type=1105 audit(1755043468.198:1528): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.435434] audit: type=1103 audit(1755043468.211:1529): pid=5930 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.746660] audit: type=1106 audit(1755043468.524:1530): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.765903] audit: type=1104 audit(1755043468.524:1531): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.173755] kauditd_printk_skb: 31 callbacks suppressed [ 188.173772] audit: type=1400 audit(1755043472.951:1543): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.189147] audit: type=1300 audit(1755043472.951:1543): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098f380 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.204471] audit: type=1327 audit(1755043472.951:1543): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.218325] audit: type=1400 audit(1755043472.965:1544): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.228808] audit: type=1300 audit(1755043472.965:1544): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400098f800 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.242249] audit: type=1327 audit(1755043472.965:1544): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.254973] audit: type=1400 audit(1755043472.972:1545): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.265521] audit: type=1300 audit(1755043472.972:1545): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098fa60 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.279003] audit: type=1327 audit(1755043472.972:1545): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.290183] audit: type=1400 audit(1755043472.980:1546): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 74.315500] kauditd_printk_skb: 269 callbacks suppressed [ 74.315504] audit: type=1400 audit(1755043359.092:735): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.325438] audit: type=1400 audit(1755043359.092:736): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.333241] audit: type=1400 audit(1755043359.092:737): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.345568] audit: type=1400 audit(1755043359.092:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.353826] audit: type=1400 audit(1755043359.092:739): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.363193] audit: type=1400 audit(1755043359.092:740): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.371492] audit: type=1400 audit(1755043359.092:741): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.385567] audit: type=1400 audit(1755043359.092:742): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.399537] audit: type=1400 audit(1755043359.092:743): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 74.407232] audit: type=1400 audit(1755043359.092:744): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 85.934940] kauditd_printk_skb: 357 callbacks suppressed [ 85.934947] audit: type=1106 audit(1755043370.710:846): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.952808] audit: type=1104 audit(1755043370.710:847): pid=1933 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 85.974686] audit: type=1106 audit(1755043370.749:848): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 85.991724] audit: type=1104 audit(1755043370.749:849): pid=1930 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 86.002200] audit: type=1131 audit(1755043370.767:850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.18.163:22-139.178.89.65:37698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 88.808602] audit: type=1325 audit(1755043373.585:851): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.817170] audit: type=1300 audit(1755043373.585:851): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.838711] audit: type=1327 audit(1755043373.585:851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.848770] audit: type=1325 audit(1755043373.609:852): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.857758] audit: type=1300 audit(1755043373.609:852): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcacc8ad0 a2=0 a3=1 items=0 ppid=2885 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.147761] kauditd_printk_skb: 7 callbacks suppressed [ 96.147766] audit: type=1325 audit(1755043380.925:855): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.158801] audit: type=1300 audit(1755043380.925:855): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.177084] audit: type=1327 audit(1755043380.925:855): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.185717] audit: type=1325 audit(1755043380.962:856): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.200982] audit: type=1300 audit(1755043380.962:856): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0eede10 a2=0 a3=1 items=0 ppid=2885 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.219011] audit: type=1327 audit(1755043380.962:856): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.251717] audit: type=1325 audit(1755043381.028:857): table=filter:95 family=2 entries=19 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 96.258624] audit: type=1300 audit(1755043381.028:857): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd365e7e0 a2=0 a3=1 items=0 ppid=2885 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.273636] audit: type=1327 audit(1755043381.028:857): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 96.284579] audit: type=1325 audit(1755043381.061:858): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.231273] kauditd_printk_skb: 178 callbacks suppressed [ 101.231277] audit: type=1400 audit(1755043386.008:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.241708] audit: type=1400 audit(1755043386.012:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.250347] audit: type=1400 audit(1755043386.012:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.258188] audit: type=1400 audit(1755043386.012:911): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.267007] audit: type=1400 audit(1755043386.012:912): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.275558] audit: type=1400 audit(1755043386.012:913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.284359] audit: type=1400 audit(1755043386.012:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.292839] audit: type=1400 audit(1755043386.012:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.301200] audit: type=1400 audit(1755043386.012:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 101.308988] audit: type=1400 audit(1755043386.018:917): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.329258] kauditd_printk_skb: 97 callbacks suppressed [ 116.329263] audit: type=1400 audit(1755043401.106:935): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.339624] audit: type=1300 audit(1755043401.106:935): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3195 pid=3768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.354726] audit: type=1327 audit(1755043401.106:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537303032393762613461643133316639383165636438633631653733 [ 116.365699] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.375272] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.383610] audit: type=1400 audit(1755043401.106:936): avc: denied { bpf } for pid=3768 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.392309] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.401515] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.415144] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.423731] audit: type=1400 audit(1755043401.106:936): avc: denied { perfmon } for pid=3768 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 116.734057] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 116.737217] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 118.253094] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 118.255664] IPv6: ADDRCONF(NETDEV_CHANGE): cali368090c52a0: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:25 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 121.036018] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.038551] IPv6: ADDRCONF(NETDEV_CHANGE): calibcc2aaccf11: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:26 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:27 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 123.108811] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 123.111299] IPv6: ADDRCONF(NETDEV_CHANGE): cali1b5898b3b3b: link becomes ready [ 123.415979] IPv6: ADDRCONF(NETDEV_CHANGE): cali74d398590f2: link becomes ready [ 123.528317] kauditd_printk_skb: 767 callbacks suppressed [ 123.528322] audit: type=1325 audit(1755043408.304:1106): table=filter:110 family=2 entries=41 op=nft_register_chain pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 123.539038] audit: type=1300 audit(1755043408.304:1106): arch=c00000b7 syscall=211 success=yes exit=23076 a0=3 a1=ffffd0a22bb0 a2=0 a3=ffffa5d11fa8 items=0 ppid=3947 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.561769] audit: type=1327 audit(1755043408.304:1106): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:28 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 123.942721] audit: type=1400 audit(1755043408.720:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.953162] audit: type=1400 audit(1755043408.720:1108): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.968453] audit: type=1400 audit(1755043408.720:1109): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.981428] audit: type=1400 audit(1755043408.720:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 123.991019] audit: type=1400 audit(1755043408.720:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.004142] audit: type=1400 audit(1755043408.720:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 124.015410] audit: type=1400 audit(1755043408.720:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 125.038481] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 125.040964] IPv6: ADDRCONF(NETDEV_CHANGE): cali175c2371b1f: link becomes ready [ 125.430782] IPv6: ADDRCONF(NETDEV_CHANGE): califd293d2407a: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:30 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 125.775507] IPv6: ADDRCONF(NETDEV_CHANGE): cali9673a742af4: link becomes ready [ 126.169581] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 126.172074] IPv6: ADDRCONF(NETDEV_CHANGE): cali8cfbacaf637: link becomes ready This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:31 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:32 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:33 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 128.972924] kauditd_printk_skb: 575 callbacks suppressed [ 128.972929] audit: type=1325 audit(1755043413.750:1292): table=filter:120 family=2 entries=13 op=nft_register_rule pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.981449] audit: type=1300 audit(1755043413.750:1292): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.993882] audit: type=1327 audit(1755043413.750:1292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 129.250355] audit: type=1325 audit(1755043413.951:1293): table=nat:121 family=2 entries=27 op=nft_register_chain pid=4953 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 129.278781] audit: type=1130 audit(1755043414.056:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.18.163:22-139.178.89.65:60960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 129.294166] audit: type=1300 audit(1755043413.951:1293): arch=c00000b7 syscall=211 success=yes exit=9348 a0=3 a1=fffff72a8450 a2=0 a3=1 items=0 ppid=2885 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.316894] audit: type=1327 audit(1755043413.951:1293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 129.490725] audit: type=1101 audit(1755043414.268:1295): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.510374] audit: type=1103 audit(1755043414.270:1296): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.538389] audit: type=1006 audit(1755043414.270:1297): pid=4957 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 This is ip-172-31-18-163 (Linux aarch64 5.15.189-flatcar) 00:03:34 SSH host key: SHA256:IjQV8oydpVnl2+nB2XWpvkzNvjnLyY8LWQXlAbmgYYE (ECDSA) SSH host key: SHA256:XQvNMSt7FgayOqSPgnJ8dc5fTtqmSLj1c895Mci52tI (RSA) SSH host key: SHA256:RdUQPUYV/KeSlOm6j2DxUz0mMaBFhtiFhqpDZbleDAE (ED25519) eth0: 172.31.18.163 fe80::472:2dff:fee5:9baf ip-172-31-18-163 login: [ 134.276311] kauditd_printk_skb: 127 callbacks suppressed [ 134.276316] audit: type=1325 audit(1755043419.053:1341): table=filter:124 family=2 entries=12 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.285822] audit: type=1300 audit(1755043419.053:1341): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.302552] audit: type=1327 audit(1755043419.053:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.315870] audit: type=1325 audit(1755043419.091:1342): table=nat:125 family=2 entries=22 op=nft_register_rule pid=5403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.324866] audit: type=1300 audit(1755043419.091:1342): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffefc53000 a2=0 a3=1 items=0 ppid=2885 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.344960] audit: type=1327 audit(1755043419.091:1342): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.403107] audit: type=1325 audit(1755043419.180:1343): table=filter:126 family=2 entries=12 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 134.411409] audit: type=1300 audit(1755043419.180:1343): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff0659ae0 a2=0 a3=1 items=0 ppid=2885 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.450645] audit: type=1327 audit(1755043419.180:1343): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 134.466483] audit: type=1325 audit(1755043419.243:1344): table=nat:127 family=2 entries=22 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 140.842205] kauditd_printk_skb: 113 callbacks suppressed [ 140.842211] audit: type=1130 audit(1755043425.618:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.18.163:22-139.178.89.65:40278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 141.061036] audit: type=1101 audit(1755043425.838:1379): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.073765] audit: type=1103 audit(1755043425.840:1380): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.085642] audit: type=1006 audit(1755043425.840:1381): pid=5560 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 141.100905] audit: type=1300 audit(1755043425.840:1381): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff699bf50 a2=3 a3=1 items=0 ppid=1 pid=5560 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.116525] audit: type=1327 audit(1755043425.840:1381): proctitle=737368643A20636F7265205B707269765D [ 141.135522] audit: type=1105 audit(1755043425.913:1382): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.150470] audit: type=1103 audit(1755043425.916:1383): pid=5563 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.582015] audit: type=1106 audit(1755043426.359:1384): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.606046] audit: type=1104 audit(1755043426.360:1385): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.934253] kauditd_printk_skb: 138 callbacks suppressed [ 146.934258] audit: type=1400 audit(1755043431.711:1434): avc: denied { watch } for pid=5222 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.3757813382/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c92,c508 tclass=file permissive=0 [ 146.951631] audit: type=1300 audit(1755043431.711:1434): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000636280 a2=fc6 a3=0 items=0 ppid=4206 pid=5222 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c92,c508 key=(null) [ 146.965251] audit: type=1327 audit(1755043431.711:1434): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 147.119535] audit: type=1325 audit(1755043431.896:1435): table=filter:132 family=2 entries=10 op=nft_register_rule pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.126989] audit: type=1300 audit(1755043431.896:1435): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.145476] audit: type=1327 audit(1755043431.896:1435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 147.162130] audit: type=1325 audit(1755043431.939:1436): table=nat:133 family=2 entries=36 op=nft_register_chain pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.168556] audit: type=1300 audit(1755043431.939:1436): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff5a1c240 a2=0 a3=1 items=0 ppid=2885 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.181296] audit: type=1327 audit(1755043431.939:1436): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 148.153836] audit: type=1130 audit(1755043432.931:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.18.163:22-139.178.89.65:36958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.724576] kauditd_printk_skb: 10 callbacks suppressed [ 153.724581] audit: type=1130 audit(1755043438.502:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.18.163:22-139.178.89.65:36972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.925024] audit: type=1101 audit(1755043438.702:1447): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.937859] audit: type=1103 audit(1755043438.713:1448): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 153.949460] audit: type=1006 audit(1755043438.713:1449): pid=5758 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 153.957069] audit: type=1300 audit(1755043438.713:1449): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc8a2740 a2=3 a3=1 items=0 ppid=1 pid=5758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.969208] audit: type=1327 audit(1755043438.713:1449): proctitle=737368643A20636F7265205B707269765D [ 153.996641] audit: type=1105 audit(1755043438.773:1450): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.010072] audit: type=1103 audit(1755043438.787:1451): pid=5760 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.332083] audit: type=1106 audit(1755043439.107:1452): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.345753] audit: type=1104 audit(1755043439.108:1453): pid=5758 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.366515] kauditd_printk_skb: 1 callbacks suppressed [ 159.366519] audit: type=1130 audit(1755043444.144:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.18.163:22-139.178.89.65:37164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.558955] audit: type=1101 audit(1755043444.335:1456): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.574365] audit: type=1103 audit(1755043444.348:1457): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.586025] audit: type=1006 audit(1755043444.348:1458): pid=5770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 159.593563] audit: type=1300 audit(1755043444.348:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b4b660 a2=3 a3=1 items=0 ppid=1 pid=5770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.604785] audit: type=1327 audit(1755043444.348:1458): proctitle=737368643A20636F7265205B707269765D [ 159.618716] audit: type=1105 audit(1755043444.394:1459): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.634391] audit: type=1103 audit(1755043444.410:1460): pid=5772 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.952629] audit: type=1106 audit(1755043444.728:1461): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 159.965712] audit: type=1104 audit(1755043444.728:1462): pid=5770 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.979184] kauditd_printk_skb: 1 callbacks suppressed [ 164.979190] audit: type=1130 audit(1755043449.756:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.18.163:22-139.178.89.65:45832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 165.175469] audit: type=1101 audit(1755043449.953:1465): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.190513] audit: type=1103 audit(1755043449.964:1466): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.205780] audit: type=1006 audit(1755043449.964:1467): pid=5788 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 165.214110] audit: type=1300 audit(1755043449.964:1467): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf95f8c0 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.239676] audit: type=1327 audit(1755043449.964:1467): proctitle=737368643A20636F7265205B707269765D [ 165.246206] audit: type=1105 audit(1755043450.006:1468): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.262204] audit: type=1103 audit(1755043450.011:1469): pid=5792 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.559922] audit: type=1106 audit(1755043450.335:1470): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 165.576581] audit: type=1104 audit(1755043450.336:1471): pid=5788 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.586209] kauditd_printk_skb: 7 callbacks suppressed [ 170.586214] audit: type=1130 audit(1755043455.364:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.18.163:22-139.178.89.65:45846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.779385] audit: type=1101 audit(1755043455.557:1476): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.794548] audit: type=1103 audit(1755043455.569:1477): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.812189] audit: type=1006 audit(1755043455.569:1478): pid=5844 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 170.818550] audit: type=1300 audit(1755043455.569:1478): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdadd9270 a2=3 a3=1 items=0 ppid=1 pid=5844 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.829933] audit: type=1327 audit(1755043455.569:1478): proctitle=737368643A20636F7265205B707269765D [ 170.836972] audit: type=1105 audit(1755043455.609:1479): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.849813] audit: type=1103 audit(1755043455.613:1480): pid=5846 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.187021] audit: type=1106 audit(1755043455.964:1481): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 171.199383] audit: type=1104 audit(1755043455.964:1482): pid=5844 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.580433] kauditd_printk_skb: 20 callbacks suppressed [ 176.580438] audit: type=1106 audit(1755043461.358:1499): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.610385] audit: type=1104 audit(1755043461.358:1500): pid=5866 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 176.632199] audit: type=1131 audit(1755043461.385:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.18.163:22-139.178.89.65:45862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.642231] audit: type=1130 audit(1755043461.406:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.18.163:22-139.178.89.65:45960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 176.708676] audit: type=1325 audit(1755043461.486:1503): table=filter:136 family=2 entries=20 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.715305] audit: type=1300 audit(1755043461.486:1503): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.730933] audit: type=1327 audit(1755043461.486:1503): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 176.744244] audit: type=1325 audit(1755043461.521:1504): table=nat:137 family=2 entries=26 op=nft_register_rule pid=5882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.751363] audit: type=1300 audit(1755043461.521:1504): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffdfd5ccb0 a2=0 a3=1 items=0 ppid=2885 pid=5882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.767172] audit: type=1327 audit(1755043461.521:1504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 183.170496] kauditd_printk_skb: 27 callbacks suppressed [ 183.170501] audit: type=1130 audit(1755043467.948:1524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.18.163:22-139.178.89.65:45970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.356291] audit: type=1101 audit(1755043468.134:1525): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.369745] audit: type=1103 audit(1755043468.147:1526): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.383025] audit: type=1006 audit(1755043468.147:1527): pid=5928 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 183.391035] audit: type=1300 audit(1755043468.147:1527): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8b88d40 a2=3 a3=1 items=0 ppid=1 pid=5928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.402725] audit: type=1327 audit(1755043468.147:1527): proctitle=737368643A20636F7265205B707269765D [ 183.420649] audit: type=1105 audit(1755043468.198:1528): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.435434] audit: type=1103 audit(1755043468.211:1529): pid=5930 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.746660] audit: type=1106 audit(1755043468.524:1530): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 183.765903] audit: type=1104 audit(1755043468.524:1531): pid=5928 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 188.173755] kauditd_printk_skb: 31 callbacks suppressed [ 188.173772] audit: type=1400 audit(1755043472.951:1543): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.189147] audit: type=1300 audit(1755043472.951:1543): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098f380 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.204471] audit: type=1327 audit(1755043472.951:1543): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.218325] audit: type=1400 audit(1755043472.965:1544): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.228808] audit: type=1300 audit(1755043472.965:1544): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400098f800 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.242249] audit: type=1327 audit(1755043472.965:1544): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.254973] audit: type=1400 audit(1755043472.972:1545): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 188.265521] audit: type=1300 audit(1755043472.972:1545): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400098fa60 a2=fc6 a3=0 items=0 ppid=2242 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 key=(null) [ 188.279003] audit: type=1327 audit(1755043472.972:1545): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 188.290183] audit: type=1400 audit(1755043472.980:1546): avc: denied { watch } for pid=2427 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c771,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 194.341269] kauditd_printk_skb: 13 callbacks suppressed [ 194.341274] audit: type=1130 audit(1755043479.119:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.18.163:22-139.178.89.65:43188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.522800] audit: type=1101 audit(1755043479.300:1557): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.550624] audit: type=1103 audit(1755043479.303:1558): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.563971] audit: type=1006 audit(1755043479.303:1559): pid=5996 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 194.571595] audit: type=1300 audit(1755043479.303:1559): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7738030 a2=3 a3=1 items=0 ppid=1 pid=5996 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.582607] audit: type=1327 audit(1755043479.303:1559): proctitle=737368643A20636F7265205B707269765D [ 194.591258] audit: type=1105 audit(1755043479.369:1560): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.607763] audit: type=1103 audit(1755043479.384:1561): pid=5998 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.900478] audit: type=1106 audit(1755043479.676:1562): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 194.913770] audit: type=1104 audit(1755043479.676:1563): pid=5996 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 199.935050] kauditd_printk_skb: 1 callbacks suppressed [ 199.935055] audit: type=1130 audit(1755043484.712:1565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.18.163:22-139.178.89.65:43202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.097086] audit: type=1101 audit(1755043484.874:1566): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.111832] audit: type=1103 audit(1755043484.876:1567): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.123737] audit: type=1006 audit(1755043484.877:1568): pid=6049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 200.136240] audit: type=1300 audit(1755043484.877:1568): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4854210 a2=3 a3=1 items=0 ppid=1 pid=6049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.148494] audit: type=1327 audit(1755043484.877:1568): proctitle=737368643A20636F7265205B707269765D [ 200.160746] audit: type=1105 audit(1755043484.938:1569): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.173418] audit: type=1103 audit(1755043484.942:1570): pid=6051 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.444933] audit: type=1106 audit(1755043485.222:1571): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 200.457399] audit: type=1104 audit(1755043485.222:1572): pid=6049 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.113710] kauditd_printk_skb: 1 callbacks suppressed [ 205.113714] audit: type=1400 audit(1755043489.891:1574): avc: denied { watch } for pid=5271 comm="apiserver" path="/calico-apiserver-certs/..2025_08_13_00_03_11.1286318736/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c119,c369 tclass=file permissive=0 [ 205.128265] audit: type=1300 audit(1755043489.891:1574): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400131e6c0 a2=fc6 a3=0 items=0 ppid=4381 pid=5271 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c119,c369 key=(null) [ 205.142602] audit: type=1327 audit(1755043489.891:1574): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 205.480416] audit: type=1130 audit(1755043490.258:1575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.18.163:22-139.178.89.65:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.655884] audit: type=1101 audit(1755043490.433:1576): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.669638] audit: type=1103 audit(1755043490.435:1577): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 205.681793] audit: type=1006 audit(1755043490.435:1578): pid=6067 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 205.692290] audit: type=1300 audit(1755043490.435:1578): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea0f7280 a2=3 a3=1 items=0 ppid=1 pid=6067 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.705520] audit: type=1327 audit(1755043490.435:1578): proctitle=737368643A20636F7265205B707269765D [ 205.722390] audit: type=1105 audit(1755043490.500:1579): pid=6067 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.036707] kauditd_printk_skb: 7 callbacks suppressed [ 211.036711] audit: type=1130 audit(1755043495.814:1585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.18.163:22-139.178.89.65:56398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.236360] audit: type=1101 audit(1755043496.014:1586): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.251885] audit: type=1103 audit(1755043496.027:1587): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.279450] audit: type=1006 audit(1755043496.027:1588): pid=6093 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 211.290827] audit: type=1300 audit(1755043496.027:1588): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec17c000 a2=3 a3=1 items=0 ppid=1 pid=6093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.308913] audit: type=1327 audit(1755043496.027:1588): proctitle=737368643A20636F7265205B707269765D [ 211.313234] audit: type=1105 audit(1755043496.091:1589): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.329048] audit: type=1103 audit(1755043496.105:1590): pid=6111 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.616693] audit: type=1106 audit(1755043496.394:1591): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 211.641714] audit: type=1104 audit(1755043496.394:1592): pid=6093 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.650770] kauditd_printk_skb: 1 callbacks suppressed [ 216.650775] audit: type=1130 audit(1755043501.428:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.18.163:22-139.178.89.65:40932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.834195] audit: type=1101 audit(1755043501.611:1595): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.846713] audit: type=1103 audit(1755043501.623:1596): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.857939] audit: type=1006 audit(1755043501.623:1597): pid=6132 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 216.866021] audit: type=1300 audit(1755043501.623:1597): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1b4ba80 a2=3 a3=1 items=0 ppid=1 pid=6132 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.877788] audit: type=1327 audit(1755043501.623:1597): proctitle=737368643A20636F7265205B707269765D [ 216.913047] audit: type=1105 audit(1755043501.690:1598): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 216.927280] audit: type=1103 audit(1755043501.703:1599): pid=6135 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 217.210744] audit: type=1106 audit(1755043501.988:1600): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 217.232492] audit: type=1104 audit(1755043501.988:1601): pid=6132 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'