_mod.service... Starting modprobe@dm_mod.service... [ 14.863448] systemd[1]: Starting modprobe@drm.service... Starting modprobe@drm.service... [ 14.872740] systemd[1]: Starting modprobe@efi_pstore.service... Starting modprobe@efi_pstore.service... [ 14.889137] systemd[1]: Starting modprobe@fuse.service... Starting modprobe@fuse.service... [ 14.897742] systemd[1]: Starting modprobe@loop.service... Starting modprobe@loop.service... [ 14.908668] systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 14.914835] systemd[1]: systemd-journald.service: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling. [ 14.919931] systemd[1]: (This warning is only shown for the first unit using IP firewalling.) [ 14.925849] systemd[1]: Starting systemd-journald.service... Starting systemd-journald.service... [ 14.939925] systemd[1]: Starting systemd-modules-load.service... Starting systemd-modules-load.service... [ 14.948825] systemd[1]: Starting systemd-network-generator.service... Starting systemd-network-generator.service... [ 14.958120] systemd[1]: Starting systemd-remount-fs.service... Starting systemd-remount-fs.service... [ 14.964782] systemd[1]: Starting systemd-udev-trigger.service... Starting systemd-udev-trigger.service... [ 14.979539] systemd[1]: Mounted dev-hugepages.mount. [ OK ] Mounted dev-hugepages.mount. [ 14.985112] fuse: init (API version 7.34) [ 14.985290] systemd[1]: Mounted dev-mqueue.mount. [ 14.988320] loop: module loaded [ OK ] Mounted dev-mqueue.mount. [ 14.991510] systemd[1]: Mounted media.mount. [ OK ] Mounted media.mount. [ 14.994969] systemd[1]: Mounted sys-kernel-debug.mount. [ OK ] Mounted sys-kernel-debug.mount. [ 15.002063] systemd[1]: Mounted sys-kernel-tracing.mount. [ OK ] Mounted sys-kernel-tracing.mount. [ 15.006392] systemd[1]: Mounted tmp.mount. [ OK ] Mounted tmp.mount. [ 15.010522] systemd[1]: Finished kmod-static-nodes.service. [ OK ] Finished kmod-static-nodes.service. [ 15.024980] audit: type=1130 audit(1755043292.293:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 15.025724] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 15.044126] systemd[1]: Finished modprobe@configfs.service. [ OK ] Finished modprobe@configfs.service. [ 15.052375] audit: type=1130 audit(1755043292.320:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 15.053141] systemd[1]: modprobe@dm_mod.service: Deactivated successfully. [ 15.063395] audit: type=1131 audit(1755043292.320:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 15.063801] systemd[1]: Finished modprobe@dm_mod.service. [ OK ] Finished modprobe@dm_mod.service. [ 15.078705] systemd[1]: modprobe@drm.service: Deactivated successfully. [ 15.080492] audit: type=1305 audit(1755043292.346:90): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 [ 15.081750] systemd[1]: Finished modprobe@drm.service. [ 15.093712] audit: type=1300 audit(1755043292.346:90): arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=fffffc7a9400 a2=4000 a3=1 items=0 ppid=1 pid=1523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) [ OK ] Finished modprobe@drm.service. [ 15.113395] systemd[1]: Started systemd-journald.service. [ 15.113632] audit: type=1327 audit(1755043292.346:90): proctitle="/usr/lib/systemd/systemd-journald" [ OK ] Started systemd-journald.service[0[ 15.121839] audit: type=1130 audit(1755043292.346:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' m. [ OK ] Finished modprobe@efi_pstore.service.[ 15.136616] audit: type=1131 audit(1755043292.346:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Finished modprobe@fuse.service. [ OK ] Finished modprobe@loop.service. [ OK ] Finished systemd-modules-load.service. [ OK ] Finished systemd-network-generator.service. [ OK ] Finished flatcar-tmpfiles.service. [ OK ] Finished systemd-remount-fs.service. [ OK ] Reached target network-pre.target. Mounting sys-fs-fuse-connections.mount... Mounting sys-kernel-config.mount... Starting systemd-hwdb-update.service... Starting systemd-journal-flush.service... Starting systemd-random-seed.service... Starting systemd-sysctl.service... Starting systemd-sysusers.service... [ OK ] Mounted sys-fs-fuse-connections.mount. [ OK ] Mounted sys-kernel-config.mount. [ OK ] Finished systemd-random-seed.service. [ OK ] Reached target first-boot-complete.target.[ 15.307847] systemd-journald[1523]: Received client request to flush runtime journal. [ OK ] Finished systemd-sysctl.service. [ OK ] Finished systemd-udev-trigger.service. Starting systemd-udev-settle.service... [ OK ] Finished systemd-journal-flush.service. [ OK ] Finished systemd-sysusers.service. Starting systemd-tmpfiles-setup-dev.service... [ OK ] Finished systemd-tmpfiles-setup-dev.service. [ OK ] Finished systemd-hwdb-update.service. Starting systemd-udevd.service... [ OK ] Started systemd-udevd.service. Starting systemd-networkd.service... Starting systemd-userdbd.service... [ OK ] Found device dev-ttyS0.device. [ OK ] Started systemd-userdbd.service. [ OK ] Started systemd-networkd.service. [ 16.566582] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Starting systemd-networkd-wait-online.service... [ OK ] Found device dev-disk-by\x2dlabel-OEM.device. [ OK ] Finished systemd-udev-settle.service. Starting lvm2-activation-early.service... [ OK ] Finished lvm2-activation-early.service. [ OK ] Reached target cryptsetup.target. Starting lvm2-activation.service... [ OK ] Finished lvm2-activation.service. [ OK ] Reached target local-fs-pre.target. [ OK ] Reached target local-fs.target. [ OK ] Reached target machines.target. Starting ldconfig.service... Starting systemd-boot-update.service... Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Starting systemd-machine-id-commit.service... Starting systemd-sysext.service... Starting systemd-fsck@dev-…label-EFI\x2dSYSTEM.service... Unmounting usr-share-oem.mount... [ OK ] Unmounted usr-share-oem.mount. [ OK ] Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. [ 17.057941] loop0: detected capacity change from 0 to 203944 [ 17.170439] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ OK ] Finished systemd-fsck@dev-…2dlabel-EFI\x2dSYSTEM.service. Mounting boot.mount... [ 17.216962] loop1: detected capacity change from 0 to 203944 [ OK ] Mounted boot.mount. [ OK ] Finished systemd-boot-update.service. Mounting usr-share-oem.mount... Starting modprobe@dm_mod.service... Starting modprobe@efi_pstore.service... Starting modprobe@loop.service... [ OK ] Finished systemd-machine-id-commit.service. [ OK ] Mounted usr-share-oem.mount. [ OK ] Finished modprobe@dm_mod.service. [ OK ] Finished modprobe@efi_pstore.service. [ OK ] Finished modprobe@loop.service. [ OK ] Finished systemd-sysext.service. Starting ensure-sysext.service... Starting systemd-tmpfiles-setup.service... [ OK ] Finished systemd-networkd-wait-online.service. [ OK ] Finished systemd-tmpfiles-setup.service. Starting audit-rules.service... Starting clean-ca-certificates.service... Starting systemd-journal-catalog-update.service... Starting systemd-resolved.service... Starting systemd-timesyncd.service... Starting systemd-update-utmp.service... [ OK ] Finished clean-ca-certificates.service. Starting modprobe@dm_mod.service... Starting modprobe@efi_pstore.service... Starting modprobe@loop.service... Starting modprobe@drm.service... [ OK ] Finished ensure-sysext.service. [ OK ] Finished modprobe@loop.service. [ OK ] Finished modprobe@dm_mod.service. [ OK ] Finished modprobe@efi_pstore.service. [ OK ] Finished systemd-update-utmp.service. [ OK ] Finished modprobe@drm.service. [ OK ] Finished systemd-journal-catalog-update.service. [ OK ] Finished audit-rules.service. [ OK ] Started systemd-timesyncd.service. [ OK ] Reached target time-set.target. [ OK ] Finished ldconfig.service. Starting systemd-update-done.service... [ OK ] Finished systemd-update-done.service. [ OK ] Started systemd-resolved.service. [ OK ] Reached target network.target. [ OK ] Reached target network-online.target. [ OK ] Reached target nss-lookup.target. [ OK ] Reached target sysinit.target. [ OK ] Started motdgen.path. [ OK ] Started user-cloudinit@var…car\x2dinstall-user_data.path. [ OK ] Started logrotate.timer. [ OK ] Started mdadm.timer. [ OK ] Started systemd-tmpfiles-clean.timer. [ OK ] Reached target paths.target. [ OK ] Reached target timers.target. [ OK ] Listening on dbus.socket. Starting docker.socket... [ OK ] Listening on sshd.socket. [ OK ] Listening on docker.socket. [ OK ] Reached target sockets.target. [ OK ] Reached target basic.target. [ OK ] Started amazon-ssm-agent.service. Starting containerd.service... Starting coreos-metadata-sshkeys@core.service... Starting dbus.service... Starting enable-oem-cloudinit.service... Starting extend-filesystems.service... Starting kubelet.service... Starting motdgen.service... [ OK ] Started nvidia.service. Starting prepare-helm.service... Starting ssh-key-proc-cmdline.service... Starting sshd-keygen.service... Starting systemd-logind.service... Starting update-engine.service... Starting update-ssh-keys-after-ignition.service... [ OK ] Finished ssh-key-proc-cmdline.service. [ OK ] Started dbus.service. [ OK ] Reached target system-config.target. [ OK ] Reached target user-config.target. [ 18.814065] extend-filesystems[1890]: Found loop1 [ 18.817216] extend-filesystems[1890]: Found nvme0n1 [ 18.822787] extend-filesystems[1890]: Found nvme0n1p1 [ 18.829298] extend-filesystems[1890]: Found nvme0n1p2 [ 18.831434] extend-filesystems[1890]: Found nvme0n1p3 [ 18.834649] extend-filesystems[1890]: Found usr [ 18.840262] extend-filesystems[1890]: Found nvme0n1p4 [ 18.842847] extend-filesystems[1890]: Found nvme0n1p6 [ OK ] Finished motdgen.service. Starting systemd-hostnamed.service... [ 18.850594] extend-filesystems[1890]: Found nvme0n1p7 [ 18.867873] extend-filesystems[1890]: Found nvme0n1p9 [ 18.891482] extend-filesystems[1890]: Checking size of /dev/nvme0n1p9 [ 18.909083] extend-filesystems[1890]: Resized partition /dev/nvme0n1p9 [ 18.957802] extend-filesystems[1953]: resize2fs 1.46.5 (30-Dec-2021) [ 19.113298] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ OK ] Started update-engine.service. [ OK ] Started locksmithd.service. [ 19.312444] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 [ 19.189415] extend-filesystems[1953]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required [ 19.192496] extend-filesystems[1953]: old_desc_blocks = 1, new_desc_blocks = 1 [ 19.194776] extend-filesystems[1953]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. [ 19.206554] extend-filesystems[1890]: Resized filesystem in /dev/nvme0n1p9 [ OK ] Finished extend-filesystems.service. [ OK ] Finished update-ssh-keys-after-ignition.service. [ OK ] Started systemd-logind.service. [ OK ] Started systemd-hostnamed.service. Starting polkit.service... [ OK ] Started containerd.service. [ OK ] Started polkit.service. [ OK ] Finished coreos-metadata-sshkeys@core.service. 2025/08/13 00:01:37Z: Amazon SSM Agent v2.3.1319.0 is running 2025/08/13 00:01:37Z: OsProductName: Flatcar Container Linux by Kinvolk 2025/08/13 00:01:37Z: OsVersion: 3510.3.8 [ OK ] Finished prepare-helm.service. [ OK ] Started kubelet.service. [ OK ] Finished sshd-keygen.service. Starting issuegen.service... [ OK ] Finished issuegen.service. Starting systemd-user-sessions.service... [ OK ] Finished systemd-user-sessions.service. [ OK ] Started getty@tty1.service. [ OK ] Started serial-getty@ttyS0.service. [ OK ] Reached target getty.target. [ OK ] Reached target multi-user.target. Starting systemd-update-utmp-runlevel.service... [ OK ] Finished systemd-update-utmp-runlevel.service. This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:01:40 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 29.837169] kauditd_printk_skb: 55 callbacks suppressed [ 29.837173] audit: type=1305 audit(1755043307.097:146): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 29.845533] audit: type=1300 audit(1755043307.097:146): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff15de370 a2=420 a3=0 items=0 ppid=1 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 29.858247] audit: type=1327 audit(1755043307.097:146): proctitle=2F7362696E2F617564697463746C002D44 [ 29.865895] audit: type=1131 audit(1755043307.101:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 29.897344] audit: type=1130 audit(1755043307.157:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 29.908138] audit: type=1106 audit(1755043307.166:149): pid=2190 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 29.918242] audit: type=1104 audit(1755043307.167:150): pid=2190 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 29.934716] audit: type=1106 audit(1755043307.194:151): pid=2186 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 29.947079] audit: type=1104 audit(1755043307.195:152): pid=2186 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 29.957763] audit: type=1131 audit(1755043307.207:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.151:22-139.178.89.65:42838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 31.039444] Initializing XFRM netlink socket This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:01:49 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 43.646617] kauditd_printk_skb: 88 callbacks suppressed [ 43.646622] audit: type=1130 audit(1755043320.902:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 43.657817] audit: type=1131 audit(1755043320.902:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.014233] audit: type=1130 audit(1755043321.268:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 44.130049] audit: type=1131 audit(1755043321.384:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 49.846278] audit: type=1131 audit(1755043327.098:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.148601] audit: type=1130 audit(1755043331.401:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.161322] audit: type=1131 audit(1755043331.401:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.472290] audit: type=1130 audit(1755043331.724:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.581182] audit: type=1131 audit(1755043331.833:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 54.959191] audit: type=1130 audit(1755043332.211:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.967431] audit: type=1131 audit(1755043332.218:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.686978] audit: type=1130 audit(1755043332.939:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 56.010839] audit: type=1130 audit(1755043333.264:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.055077] audit: type=1400 audit(1755043334.308:205): avc: denied { mac_admin } for pid=2524 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.063145] audit: type=1401 audit(1755043334.308:205): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 57.067477] audit: type=1300 audit(1755043334.308:205): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a78390 a1=4000c08468 a2=4000a78360 a3=25 items=0 ppid=1 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.079237] audit: type=1327 audit(1755043334.308:205): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 57.090044] audit: type=1400 audit(1755043334.312:206): avc: denied { mac_admin } for pid=2524 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 57.101329] audit: type=1401 audit(1755043334.312:206): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 69.658990] kauditd_printk_skb: 42 callbacks suppressed [ 69.658995] audit: type=1131 audit(1755043346.910:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.988513] audit: type=1130 audit(1755043347.240:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 70.184302] audit: type=1400 audit(1755043347.436:222): avc: denied { mac_admin } for pid=2984 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.198133] audit: type=1401 audit(1755043347.436:222): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 70.207714] audit: type=1300 audit(1755043347.436:222): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ba0360 a1=4000ae25a0 a2=4000ba0330 a3=25 items=0 ppid=1 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.237612] audit: type=1327 audit(1755043347.436:222): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 70.253833] audit: type=1400 audit(1755043347.436:223): avc: denied { mac_admin } for pid=2984 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 70.265777] audit: type=1401 audit(1755043347.436:223): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" [ 70.275151] audit: type=1300 audit(1755043347.436:223): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a7cc60 a1=4000ae25b8 a2=4000ba03f0 a3=25 items=0 ppid=1 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) [ 70.288391] audit: type=1327 audit(1755043347.436:223): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 [ 77.482085] kauditd_printk_skb: 4 callbacks suppressed [ 77.482089] audit: type=1325 audit(1755043354.733:225): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 77.494907] audit: type=1300 audit(1755043354.733:225): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0880c70 a2=0 a3=1 items=0 ppid=3113 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.509415] audit: type=1327 audit(1755043354.733:225): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 77.516471] audit: type=1325 audit(1755043354.733:226): table=nat:39 family=2 entries=1 op=nft_register_chain pid=3183 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 77.524706] audit: type=1300 audit(1755043354.733:226): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc86d1f0 a2=0 a3=1 items=0 ppid=3113 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.537538] audit: type=1327 audit(1755043354.733:226): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 77.543473] audit: type=1325 audit(1755043354.735:227): table=filter:40 family=2 entries=1 op=nft_register_chain pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 77.549743] audit: type=1300 audit(1755043354.735:227): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd170ec40 a2=0 a3=1 items=0 ppid=3113 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.565008] audit: type=1327 audit(1755043354.735:227): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 [ 77.571079] audit: type=1325 audit(1755043354.735:228): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 100.836893] kauditd_printk_skb: 143 callbacks suppressed [ 100.836898] audit: type=1106 audit(1755043378.089:276): pid=2223 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 100.848579] audit: type=1104 audit(1755043378.101:277): pid=2223 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 100.886413] audit: type=1106 audit(1755043378.137:278): pid=2219 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 100.913889] audit: type=1104 audit(1755043378.137:279): pid=2219 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 100.924121] audit: type=1131 audit(1755043378.152:280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.151:22-139.178.89.65:42846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 105.008268] audit: type=1325 audit(1755043382.260:281): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.016725] audit: type=1300 audit(1755043382.260:281): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffedf7ecd0 a2=0 a3=1 items=0 ppid=3113 pid=3357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.029537] audit: type=1327 audit(1755043382.260:281): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 105.035492] audit: type=1325 audit(1755043382.275:282): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.044242] audit: type=1300 audit(1755043382.275:282): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffedf7ecd0 a2=0 a3=1 items=0 ppid=3113 pid=3357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.525257] kauditd_printk_skb: 7 callbacks suppressed [ 112.525262] audit: type=1325 audit(1755043389.775:285): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.553882] audit: type=1300 audit(1755043389.775:285): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd1e68770 a2=0 a3=1 items=0 ppid=3113 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.570903] audit: type=1327 audit(1755043389.775:285): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.580952] audit: type=1325 audit(1755043389.832:286): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.593853] audit: type=1300 audit(1755043389.832:286): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd1e68770 a2=0 a3=1 items=0 ppid=3113 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.616695] audit: type=1327 audit(1755043389.832:286): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.655876] audit: type=1325 audit(1755043389.907:287): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.662973] audit: type=1300 audit(1755043389.907:287): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdfc63550 a2=0 a3=1 items=0 ppid=3113 pid=3365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.676108] audit: type=1327 audit(1755043389.907:287): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 112.709935] audit: type=1325 audit(1755043389.961:288): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3365 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.659873] kauditd_printk_skb: 8 callbacks suppressed [ 117.659878] audit: type=1325 audit(1755043394.910:291): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.670878] audit: type=1300 audit(1755043394.910:291): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc0e4c790 a2=0 a3=1 items=0 ppid=3113 pid=3664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.691700] audit: type=1327 audit(1755043394.910:291): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 117.697972] audit: type=1325 audit(1755043394.926:292): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.709234] audit: type=1300 audit(1755043394.926:292): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc0e4c790 a2=0 a3=1 items=0 ppid=3113 pid=3664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.724275] audit: type=1327 audit(1755043394.926:292): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 133.478242] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 133.481231] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 135.389518] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 135.392058] IPv6: ADDRCONF(NETDEV_CHANGE): cali6498075399c: link becomes ready [ 135.610518] audit: type=1400 audit(1755043412.862:293): avc: denied { write } for pid=4311 comm="tee" name="fd" dev="proc" ino=22185 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 135.624866] audit: type=1300 audit(1755043412.862:293): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffecc297c0 a2=241 a3=1b6 items=1 ppid=4298 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.640382] audit: type=1307 audit(1755043412.862:293): cwd="/etc/service/enabled/node-status-reporter/log" [ 135.655411] audit: type=1302 audit(1755043412.862:293): item=0 name="/dev/fd/63" inode=22851 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 135.678541] audit: type=1327 audit(1755043412.862:293): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 135.717086] audit: type=1400 audit(1755043412.969:294): avc: denied { write } for pid=4358 comm="tee" name="fd" dev="proc" ino=22217 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 135.729236] audit: type=1300 audit(1755043412.969:294): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff93be7d0 a2=241 a3=1b6 items=1 ppid=4302 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.743467] audit: type=1307 audit(1755043412.969:294): cwd="/etc/service/enabled/bird/log" [ 135.747178] audit: type=1302 audit(1755043412.969:294): item=0 name="/dev/fd/63" inode=22195 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 135.756372] audit: type=1327 audit(1755043412.969:294): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:34 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 138.139967] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 138.142569] IPv6: ADDRCONF(NETDEV_CHANGE): cali4658d01368a: link becomes ready [ 138.313336] IPv6: ADDRCONF(NETDEV_CHANGE): cali03a672766d6: link becomes ready This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:35 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 139.073738] IPv6: ADDRCONF(NETDEV_CHANGE): cali9af93f385cf: link becomes ready This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:36 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 140.100790] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 140.103405] IPv6: ADDRCONF(NETDEV_CHANGE): cali28fc58a798b: link becomes ready [ 140.466431] IPv6: ADDRCONF(NETDEV_CHANGE): cali3abb69b4f11: link becomes ready This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:37 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 141.508575] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 141.511471] IPv6: ADDRCONF(NETDEV_CHANGE): califc96d725571: link becomes ready This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:38 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 141.921697] IPv6: ADDRCONF(NETDEV_CHANGE): calid0dd8b3f31c: link becomes ready [ 142.139752] kauditd_printk_skb: 562 callbacks suppressed [ 142.139757] audit: type=1325 audit(1755043419.391:407): table=filter:110 family=2 entries=52 op=nft_register_chain pid=5163 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 142.151715] audit: type=1300 audit(1755043419.391:407): arch=c00000b7 syscall=211 success=yes exit=23908 a0=3 a1=fffffe416770 a2=0 a3=ffffb966efa8 items=0 ppid=4310 pid=5163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.200043] audit: type=1327 audit(1755043419.391:407): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 142.277258] audit: type=1325 audit(1755043419.529:408): table=filter:111 family=2 entries=20 op=nft_register_rule pid=5193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 142.284526] audit: type=1300 audit(1755043419.529:408): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff6cd3770 a2=0 a3=1 items=0 ppid=3113 pid=5193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.302532] audit: type=1327 audit(1755043419.529:408): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 142.323793] audit: type=1325 audit(1755043419.537:409): table=nat:112 family=2 entries=14 op=nft_register_rule pid=5193 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 142.351311] audit: type=1300 audit(1755043419.537:409): arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff6cd3770 a2=0 a3=1 items=0 ppid=3113 pid=5193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.371600] audit: type=1327 audit(1755043419.537:409): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 142.381630] audit: type=1325 audit(1755043419.590:410): table=filter:113 family=2 entries=60 op=nft_register_chain pid=5196 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:40 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:41 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: This is ip-172-31-27-151 (Linux aarch64 5.15.189-flatcar) 00:03:42 SSH host key: SHA256:sgOlWz13vRhilPV/Ia39gg9WYEH236DdniIzIxRt+aI (ECDSA) SSH host key: SHA256:JTZYzZeRj8oRWEGhkZEKs8eDeZW7AQa2cgsOOSfAWHU (RSA) SSH host key: SHA256:XmyxcldrmdyEhn+cieVYjjG02Tyb/aspL31uLZuAVjk (ED25519) eth0: 172.31.27.151 fe80::450:e9ff:fe6c:d43d ip-172-31-27-151 login: [ 149.263870] kauditd_printk_skb: 31 callbacks suppressed [ 149.263875] audit: type=1130 audit(1755043426.516:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.151:22-139.178.89.65:58362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 149.477034] audit: type=1101 audit(1755043426.729:427): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.490267] audit: type=1103 audit(1755043426.742:428): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.503851] audit: type=1006 audit(1755043426.742:429): pid=5407 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 149.513117] audit: type=1300 audit(1755043426.742:429): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb00e820 a2=3 a3=1 items=0 ppid=1 pid=5407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.526418] audit: type=1327 audit(1755043426.742:429): proctitle=737368643A20636F7265205B707269765D [ 149.550408] audit: type=1105 audit(1755043426.802:430): pid=5407 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.562606] audit: type=1103 audit(1755043426.805:431): pid=5410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.881174] audit: type=1106 audit(1755043427.133:432): pid=5407 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 149.894410] audit: type=1104 audit(1755043427.133:433): pid=5407 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 154.321147] kauditd_printk_skb: 7 callbacks suppressed [ 154.321152] audit: type=1325 audit(1755043431.573:437): table=filter:122 family=2 entries=12 op=nft_register_rule pid=5598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.339467] audit: type=1300 audit(1755043431.573:437): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc29eda50 a2=0 a3=1 items=0 ppid=3113 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.353382] audit: type=1327 audit(1755043431.573:437): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.360756] audit: type=1325 audit(1755043431.591:438): table=nat:123 family=2 entries=22 op=nft_register_rule pid=5598 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.368734] audit: type=1300 audit(1755043431.591:438): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc29eda50 a2=0 a3=1 items=0 ppid=3113 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.382625] audit: type=1327 audit(1755043431.591:438): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.443586] audit: type=1325 audit(1755043431.695:439): table=filter:124 family=2 entries=12 op=nft_register_rule pid=5615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.460074] audit: type=1300 audit(1755043431.695:439): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffd5d5740 a2=0 a3=1 items=0 ppid=3113 pid=5615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.511144] audit: type=1327 audit(1755043431.695:439): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.523723] audit: type=1325 audit(1755043431.712:440): table=nat:125 family=2 entries=22 op=nft_register_rule pid=5615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.308913] kauditd_printk_skb: 47 callbacks suppressed [ 162.308918] audit: type=1130 audit(1755043439.561:472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.151:22-139.178.89.65:34642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.510893] audit: type=1101 audit(1755043439.763:473): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.522580] audit: type=1103 audit(1755043439.765:474): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.544364] audit: type=1006 audit(1755043439.766:475): pid=5761 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 162.550941] audit: type=1300 audit(1755043439.766:475): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9d461e0 a2=3 a3=1 items=0 ppid=1 pid=5761 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.566188] audit: type=1327 audit(1755043439.766:475): proctitle=737368643A20636F7265205B707269765D [ 162.573135] audit: type=1105 audit(1755043439.825:476): pid=5761 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.588458] audit: type=1103 audit(1755043439.839:477): pid=5767 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.860316] audit: type=1106 audit(1755043440.112:478): pid=5761 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.872840] audit: type=1104 audit(1755043440.112:479): pid=5761 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.884088] kauditd_printk_skb: 1 callbacks suppressed [ 167.884093] audit: type=1130 audit(1755043445.136:481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.151:22-139.178.89.65:34656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.062232] audit: type=1101 audit(1755043445.314:482): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.075555] audit: type=1103 audit(1755043445.327:483): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.085961] audit: type=1006 audit(1755043445.327:484): pid=5783 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 168.093294] audit: type=1300 audit(1755043445.327:484): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff85aecc0 a2=3 a3=1 items=0 ppid=1 pid=5783 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.116178] audit: type=1327 audit(1755043445.327:484): proctitle=737368643A20636F7265205B707269765D [ 168.124651] audit: type=1105 audit(1755043445.376:485): pid=5783 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.137204] audit: type=1103 audit(1755043445.379:486): pid=5786 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.420683] audit: type=1106 audit(1755043445.671:487): pid=5783 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.438973] audit: type=1104 audit(1755043445.671:488): pid=5783 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.444086] kauditd_printk_skb: 1 callbacks suppressed [ 173.444090] audit: type=1130 audit(1755043450.696:490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.151:22-139.178.89.65:60948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.659293] audit: type=1101 audit(1755043450.911:491): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.676393] audit: type=1103 audit(1755043450.911:492): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.686854] audit: type=1006 audit(1755043450.911:493): pid=5796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 173.693739] audit: type=1300 audit(1755043450.911:493): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3ba3d40 a2=3 a3=1 items=0 ppid=1 pid=5796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.726876] audit: type=1327 audit(1755043450.911:493): proctitle=737368643A20636F7265205B707269765D [ 173.737740] audit: type=1105 audit(1755043450.979:494): pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.768407] audit: type=1103 audit(1755043450.986:495): pid=5822 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.077406] audit: type=1106 audit(1755043451.329:496): pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 174.094662] audit: type=1104 audit(1755043451.329:497): pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.100463] kauditd_printk_skb: 1 callbacks suppressed [ 179.100468] audit: type=1130 audit(1755043456.352:499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.151:22-139.178.89.65:60954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.335771] audit: type=1101 audit(1755043456.588:500): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.355884] audit: type=1103 audit(1755043456.601:501): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.390696] audit: type=1006 audit(1755043456.601:502): pid=5853 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 179.400606] audit: type=1300 audit(1755043456.601:502): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8c6d390 a2=3 a3=1 items=0 ppid=1 pid=5853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.413777] audit: type=1327 audit(1755043456.601:502): proctitle=737368643A20636F7265205B707269765D [ 179.417764] audit: type=1105 audit(1755043456.636:503): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.429876] audit: type=1103 audit(1755043456.639:504): pid=5856 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.701616] audit: type=1106 audit(1755043456.952:505): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.721881] audit: type=1104 audit(1755043456.952:506): pid=5853 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.082172] kauditd_printk_skb: 20 callbacks suppressed [ 185.082177] audit: type=1325 audit(1755043462.334:523): table=filter:130 family=2 entries=9 op=nft_register_rule pid=5948 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 185.114194] audit: type=1300 audit(1755043462.334:523): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe38412f0 a2=0 a3=1 items=0 ppid=3113 pid=5948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.127388] audit: type=1327 audit(1755043462.334:523): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 185.247844] audit: type=1325 audit(1755043462.499:524): table=nat:131 family=2 entries=31 op=nft_register_chain pid=5948 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 185.261565] audit: type=1300 audit(1755043462.499:524): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffe38412f0 a2=0 a3=1 items=0 ppid=3113 pid=5948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.280567] audit: type=1327 audit(1755043462.499:524): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 185.681722] audit: type=1106 audit(1755043462.933:525): pid=5895 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.726562] audit: type=1104 audit(1755043462.933:526): pid=5895 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.748667] audit: type=1131 audit(1755043462.950:527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.151:22-139.178.89.65:60970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.772563] audit: type=1130 audit(1755043462.962:528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.151:22-139.178.89.65:47478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.306522] kauditd_printk_skb: 33 callbacks suppressed [ 192.306529] audit: type=1130 audit(1755043469.557:550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.151:22-139.178.89.65:38090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.533726] audit: type=1101 audit(1755043469.785:551): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.556927] audit: type=1103 audit(1755043469.797:552): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.569559] audit: type=1006 audit(1755043469.797:553): pid=6164 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 192.584410] audit: type=1300 audit(1755043469.797:553): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdef16040 a2=3 a3=1 items=0 ppid=1 pid=6164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.615386] audit: type=1327 audit(1755043469.797:553): proctitle=737368643A20636F7265205B707269765D [ 192.636163] audit: type=1105 audit(1755043469.888:554): pid=6164 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.654628] audit: type=1103 audit(1755043469.902:555): pid=6192 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 193.040295] audit: type=1106 audit(1755043470.292:556): pid=6164 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 193.058537] audit: type=1104 audit(1755043470.293:557): pid=6164 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.065943] kauditd_printk_skb: 7 callbacks suppressed [ 198.065948] audit: type=1130 audit(1755043475.318:561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.151:22-139.178.89.65:38100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.267724] audit: type=1101 audit(1755043475.520:562): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.284283] audit: type=1103 audit(1755043475.533:563): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.297162] audit: type=1006 audit(1755043475.533:564): pid=6347 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 198.306341] audit: type=1300 audit(1755043475.533:564): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9fa5e50 a2=3 a3=1 items=0 ppid=1 pid=6347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.320280] audit: type=1327 audit(1755043475.533:564): proctitle=737368643A20636F7265205B707269765D [ 198.343795] audit: type=1105 audit(1755043475.594:565): pid=6347 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.359617] audit: type=1103 audit(1755043475.611:566): pid=6350 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.646950] audit: type=1106 audit(1755043475.899:567): pid=6347 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 198.680424] audit: type=1104 audit(1755043475.911:568): pid=6347 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.675765] kauditd_printk_skb: 1 callbacks suppressed [ 203.675770] audit: type=1130 audit(1755043480.928:570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.151:22-139.178.89.65:57956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.880308] audit: type=1101 audit(1755043481.132:571): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.900387] audit: type=1103 audit(1755043481.144:572): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.936843] audit: type=1006 audit(1755043481.144:573): pid=6381 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 203.943175] audit: type=1300 audit(1755043481.144:573): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec1ffa20 a2=3 a3=1 items=0 ppid=1 pid=6381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.954230] audit: type=1327 audit(1755043481.144:573): proctitle=737368643A20636F7265205B707269765D [ 203.957849] audit: type=1105 audit(1755043481.184:574): pid=6381 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.976715] audit: type=1103 audit(1755043481.187:575): pid=6384 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 204.275598] audit: type=1106 audit(1755043481.528:576): pid=6381 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 204.294734] audit: type=1104 audit(1755043481.534:577): pid=6381 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.299696] kauditd_printk_skb: 1 callbacks suppressed [ 209.299700] audit: type=1130 audit(1755043486.552:579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.151:22-139.178.89.65:57960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.493409] audit: type=1101 audit(1755043486.744:580): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.504467] audit: type=1103 audit(1755043486.756:581): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.515702] audit: type=1006 audit(1755043486.757:582): pid=6394 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 209.522605] audit: type=1300 audit(1755043486.757:582): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe24a0610 a2=3 a3=1 items=0 ppid=1 pid=6394 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.535636] audit: type=1327 audit(1755043486.757:582): proctitle=737368643A20636F7265205B707269765D [ 209.561873] audit: type=1105 audit(1755043486.814:583): pid=6394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.577867] audit: type=1103 audit(1755043486.829:584): pid=6397 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 209.989683] audit: type=1106 audit(1755043487.242:585): pid=6394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 210.004608] audit: type=1104 audit(1755043487.242:586): pid=6394 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.012760] kauditd_printk_skb: 1 callbacks suppressed [ 215.012764] audit: type=1130 audit(1755043492.265:588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.151:22-139.178.89.65:42460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.217513] audit: type=1101 audit(1755043492.470:589): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.230201] audit: type=1103 audit(1755043492.482:590): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.251893] audit: type=1006 audit(1755043492.483:591): pid=6445 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 215.262981] audit: type=1300 audit(1755043492.483:591): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5a0bfb0 a2=3 a3=1 items=0 ppid=1 pid=6445 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.279330] audit: type=1327 audit(1755043492.483:591): proctitle=737368643A20636F7265205B707269765D [ 215.284362] audit: type=1105 audit(1755043492.526:592): pid=6445 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.297518] audit: type=1103 audit(1755043492.536:593): pid=6448 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.610061] audit: type=1106 audit(1755043492.862:594): pid=6445 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 215.641860] audit: type=1104 audit(1755043492.875:595): pid=6445 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'