48.242989] audit: type=1327 audit(1719903521.043:332): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 48.245919] audit: type=1400 audit(1719903521.043:333): avc: denied { watch } for pid=2755 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c333,c406 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 48.247979] audit: type=1300 audit(1719903521.043:333): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00658d240 a2=fc6 a3=0 items=0 ppid=2607 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c333,c406 key=(null) [ 48.251473] audit: type=1327 audit(1719903521.043:333): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 48.254331] audit: type=1400 audit(1719903521.044:334): avc: denied { watch } for pid=2755 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="overlay" ino=6318 scontext=system_u:system_r:container_t:s0:c333,c406 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 48.257025] audit: type=1300 audit(1719903521.044:334): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00493f620 a2=fc6 a3=0 items=0 ppid=2607 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c333,c406 key=(null) [ 48.260408] audit: type=1327 audit(1719903521.044:334): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3736002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 48.264090] audit: type=1400 audit(1719903521.047:335): avc: denied { watch } for pid=2755 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="overlay" ino=6324 scontext=system_u:system_r:container_t:s0:c333,c406 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 53.671946] kauditd_printk_skb: 53 callbacks suppressed [ 53.671949] audit: type=1106 audit(1719903526.478:383): pid=2901 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 53.676208] audit: type=1104 audit(1719903526.479:384): pid=2901 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 55.202876] audit: type=1106 audit(1719903528.009:385): pid=2080 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 55.205110] audit: type=1104 audit(1719903528.012:386): pid=2080 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 55.230893] audit: type=1106 audit(1719903528.037:387): pid=2077 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 55.233979] audit: type=1104 audit(1719903528.037:388): pid=2077 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 55.236936] audit: type=1131 audit(1719903528.042:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.76:22-139.178.89.65:50758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.296246] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2969) [ 58.491485] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2968) [ 58.684191] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2968) [ 63.462350] audit: type=1400 audit(1719903536.268:390): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 63.464857] audit: type=1300 audit(1719903536.268:390): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0008912c0 a2=fc6 a3=0 items=0 ppid=2605 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c522,c868 key=(null) [ 63.468642] audit: type=1400 audit(1719903536.272:391): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 63.471825] audit: type=1300 audit(1719903536.272:391): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001071a60 a2=fc6 a3=0 items=0 ppid=2605 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c522,c868 key=(null) [ 63.474694] audit: type=1327 audit(1719903536.272:391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 63.477768] audit: type=1400 audit(1719903536.272:392): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 63.480670] audit: type=1300 audit(1719903536.272:392): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001071aa0 a2=fc6 a3=0 items=0 ppid=2605 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c522,c868 key=(null) [ 63.483898] audit: type=1327 audit(1719903536.272:392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 63.486700] audit: type=1400 audit(1719903536.272:393): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 63.489971] audit: type=1300 audit(1719903536.272:393): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001071b20 a2=fc6 a3=0 items=0 ppid=2605 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c522,c868 key=(null) [ 74.868274] kauditd_printk_skb: 205 callbacks suppressed [ 74.868277] audit: type=1334 audit(1719903547.674:469): prog-id=117 op=LOAD [ 74.869673] audit: type=1334 audit(1719903547.675:470): prog-id=118 op=LOAD [ 74.870263] audit: type=1300 audit(1719903547.675:470): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00018d988 a2=78 a3=0 items=0 ppid=3262 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.873053] audit: type=1327 audit(1719903547.675:470): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264323832383135643130363962386437643063626334343236386632 [ 74.875574] audit: type=1334 audit(1719903547.675:471): prog-id=119 op=LOAD [ 74.876422] audit: type=1300 audit(1719903547.675:471): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00018d720 a2=78 a3=0 items=0 ppid=3262 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 74.878979] audit: type=1327 audit(1719903547.675:471): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264323832383135643130363962386437643063626334343236386632 [ 74.882337] audit: type=1334 audit(1719903547.675:472): prog-id=119 op=UNLOAD [ 74.883283] audit: type=1334 audit(1719903547.675:473): prog-id=118 op=UNLOAD [ 74.884048] audit: type=1334 audit(1719903547.675:474): prog-id=120 op=LOAD [ 79.870209] kauditd_printk_skb: 1142 callbacks suppressed [ 79.870212] audit: type=1334 audit(1719903552.675:1049): prog-id=408 op=LOAD [ 79.872200] audit: type=1300 audit(1719903552.675:1049): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd18010630 a2=90 a3=1001 items=0 ppid=3861 pid=3918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 79.875235] audit: type=1327 audit(1719903552.675:1049): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 79.876417] audit: type=1334 audit(1719903552.679:1050): prog-id=408 op=UNLOAD [ 79.877556] audit: type=1334 audit(1719903552.679:1051): prog-id=409 op=LOAD [ 79.879037] audit: type=1300 audit(1719903552.679:1051): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd18018650 a2=90 a3=4 items=0 ppid=3861 pid=3918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 79.883913] audit: type=1327 audit(1719903552.679:1051): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 79.885169] audit: type=1334 audit(1719903552.679:1052): prog-id=409 op=UNLOAD [ 79.886250] audit: type=1334 audit(1719903552.679:1053): prog-id=410 op=LOAD [ 79.887467] audit: type=1300 audit(1719903552.679:1053): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd18018650 a2=90 a3=4 items=0 ppid=3861 pid=3918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 82.090334] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_net: link becomes ready [ 82.090997] IPv6: ADDRCONF(NETDEV_CHANGE): cilium_host: link becomes ready [ 82.718809] NET: Registered PF_ALG protocol family This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 06:59:15 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: [ 83.624065] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 06:59:16 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: [ 84.300167] eth0: renamed from tmp4be43 [ 84.305232] eth0: renamed from tmp7e006 [ 84.308786] IPv6: ADDRCONF(NETDEV_CHANGE): lxc57fbf88d652a: link becomes ready [ 84.313243] IPv6: ADDRCONF(NETDEV_CHANGE): lxc3b74b5e46e68: link becomes ready [ 85.185492] kauditd_printk_skb: 2382 callbacks suppressed [ 85.185495] audit: type=1334 audit(1719903557.991:2217): prog-id=970 op=LOAD [ 85.186945] audit: type=1300 audit(1719903557.991:2217): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe28950e80 a2=74 a3=7ffe28950e80 items=0 ppid=3861 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 85.189969] audit: type=1327 audit(1719903557.991:2217): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A0034375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 85.193787] audit: type=1334 audit(1719903557.991:2218): prog-id=970 op=UNLOAD [ 85.194767] audit: type=1334 audit(1719903557.991:2219): prog-id=971 op=LOAD [ 85.195753] audit: type=1300 audit(1719903557.991:2219): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe28950e10 a2=80 a3=0 items=0 ppid=3861 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 85.200630] audit: type=1327 audit(1719903557.991:2219): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A0034375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 85.204648] audit: type=1334 audit(1719903557.991:2220): prog-id=971 op=UNLOAD [ 85.205837] audit: type=1334 audit(1719903557.991:2221): prog-id=972 op=LOAD [ 85.207809] audit: type=1300 audit(1719903557.991:2221): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe28950af0 a2=80 a3=0 items=0 ppid=3861 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 06:59:18 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 06:59:19 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 06:59:20 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: [ 90.278657] kauditd_printk_skb: 461 callbacks suppressed [ 90.278659] audit: type=1325 audit(1719903563.084:2406): table=filter:137 family=2 entries=14 op=nft_register_rule pid=4513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.281359] audit: type=1300 audit(1719903563.084:2406): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd1c07efd0 a2=0 a3=7ffd1c07efbc items=0 ppid=3341 pid=4513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.284864] audit: type=1327 audit(1719903563.084:2406): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 90.287957] audit: type=1325 audit(1719903563.094:2407): table=nat:138 family=2 entries=12 op=nft_register_rule pid=4513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.289975] audit: type=1300 audit(1719903563.094:2407): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd1c07efd0 a2=0 a3=0 items=0 ppid=3341 pid=4513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.293811] audit: type=1327 audit(1719903563.094:2407): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 90.305469] audit: type=1325 audit(1719903563.111:2408): table=filter:139 family=2 entries=14 op=nft_register_rule pid=4516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 90.307521] audit: type=1300 audit(1719903563.111:2408): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd559f0270 a2=0 a3=7ffd559f025c items=0 ppid=3341 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 90.311567] audit: type=1327 audit(1719903563.111:2408): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 90.315415] audit: type=1325 audit(1719903563.111:2409): table=nat:140 family=2 entries=12 op=nft_register_rule pid=4516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 95.905053] kauditd_printk_skb: 14 callbacks suppressed [ 95.905055] audit: type=1130 audit(1719903568.710:2414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.76:22-139.178.89.65:46798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 96.091742] audit: type=1101 audit(1719903568.898:2415): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.094415] audit: type=1103 audit(1719903568.899:2416): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.096787] audit: type=1006 audit(1719903568.899:2417): pid=4538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 96.098522] audit: type=1300 audit(1719903568.899:2417): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd02ec01b0 a2=3 a3=7feb18dde480 items=0 ppid=1 pid=4538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.101168] audit: type=1327 audit(1719903568.899:2417): proctitle=737368643A20636F7265205B707269765D [ 96.120847] audit: type=1105 audit(1719903568.927:2418): pid=4538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.124484] audit: type=1103 audit(1719903568.930:2419): pid=4540 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.841330] audit: type=1106 audit(1719903569.646:2420): pid=4538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 96.844545] audit: type=1104 audit(1719903569.647:2421): pid=4538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 101.876492] kauditd_printk_skb: 1 callbacks suppressed [ 101.876494] audit: type=1130 audit(1719903574.682:2423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.76:22-139.178.89.65:46812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 102.045924] audit: type=1101 audit(1719903574.852:2424): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.048988] audit: type=1103 audit(1719903574.855:2425): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.051278] audit: type=1006 audit(1719903574.855:2426): pid=4552 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 102.052658] audit: type=1300 audit(1719903574.855:2426): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbcbf79f0 a2=3 a3=7fa555ba2480 items=0 ppid=1 pid=4552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.055564] audit: type=1327 audit(1719903574.855:2426): proctitle=737368643A20636F7265205B707269765D [ 102.072634] audit: type=1105 audit(1719903574.879:2427): pid=4552 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.076342] audit: type=1103 audit(1719903574.882:2428): pid=4554 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.345265] audit: type=1106 audit(1719903575.151:2429): pid=4552 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 102.348358] audit: type=1104 audit(1719903575.151:2430): pid=4552 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.373217] kauditd_printk_skb: 1 callbacks suppressed [ 107.373220] audit: type=1130 audit(1719903580.179:2432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.76:22-139.178.89.65:39764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 107.550393] audit: type=1101 audit(1719903580.356:2433): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.553480] audit: type=1103 audit(1719903580.358:2434): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 107.555822] audit: type=1006 audit(1719903580.358:2435): pid=4564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 107.557875] audit: type=1300 audit(1719903580.358:2435): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4c887090 a2=3 a3=7fa4c5861480 items=0 ppid=1 pid=4564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.562092] audit: type=1327 audit(1719903580.358:2435): proctitle=737368643A20636F7265205B707269765D [ 107.563396] audit: type=1400 audit(1719903580.363:2436): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="overlay" ino=6322 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 107.566108] audit: type=1300 audit(1719903580.363:2436): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002288fc0 a2=fc6 a3=0 items=0 ppid=2605 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c522,c868 key=(null) [ 107.570213] audit: type=1327 audit(1719903580.363:2436): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 107.572643] audit: type=1400 audit(1719903580.366:2437): avc: denied { watch } for pid=2737 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=6307 scontext=system_u:system_r:container_t:s0:c522,c868 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 112.851368] kauditd_printk_skb: 25 callbacks suppressed [ 112.851371] audit: type=1130 audit(1719903585.657:2449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.76:22-139.178.89.65:39780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 113.015461] audit: type=1101 audit(1719903585.821:2450): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.023202] audit: type=1103 audit(1719903585.824:2451): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.026540] audit: type=1006 audit(1719903585.824:2452): pid=4576 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 113.030056] audit: type=1300 audit(1719903585.824:2452): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdf3c8a10 a2=3 a3=7faffac41480 items=0 ppid=1 pid=4576 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.034668] audit: type=1327 audit(1719903585.824:2452): proctitle=737368643A20636F7265205B707269765D [ 113.084063] audit: type=1105 audit(1719903585.890:2453): pid=4576 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.087720] audit: type=1103 audit(1719903585.893:2454): pid=4580 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.291766] audit: type=1106 audit(1719903586.098:2455): pid=4576 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 113.294682] audit: type=1104 audit(1719903586.098:2456): pid=4576 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.457611] kauditd_printk_skb: 23 callbacks suppressed [ 120.457614] audit: type=1130 audit(1719903593.264:2476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.76:22-139.178.89.65:44984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 120.614498] audit: type=1101 audit(1719903593.420:2477): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.617271] audit: type=1103 audit(1719903593.420:2478): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.620125] audit: type=1006 audit(1719903593.420:2479): pid=4613 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 120.622454] audit: type=1300 audit(1719903593.420:2479): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe166f7220 a2=3 a3=7f3ccb1f5480 items=0 ppid=1 pid=4613 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 120.626531] audit: type=1327 audit(1719903593.420:2479): proctitle=737368643A20636F7265205B707269765D [ 120.635828] audit: type=1105 audit(1719903593.442:2480): pid=4613 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.639327] audit: type=1103 audit(1719903593.446:2481): pid=4615 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.827398] audit: type=1106 audit(1719903593.633:2482): pid=4613 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 120.830322] audit: type=1104 audit(1719903593.635:2483): pid=4613 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 125.866754] kauditd_printk_skb: 13 callbacks suppressed [ 125.866757] audit: type=1130 audit(1719903598.673:2489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.76:22-139.178.89.65:59758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 126.026096] audit: type=1101 audit(1719903598.832:2490): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.029474] audit: type=1103 audit(1719903598.835:2491): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.032777] audit: type=1006 audit(1719903598.835:2492): pid=4624 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 126.034678] audit: type=1300 audit(1719903598.835:2492): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34d3bd50 a2=3 a3=7fda3f69a480 items=0 ppid=1 pid=4624 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.038393] audit: type=1327 audit(1719903598.835:2492): proctitle=737368643A20636F7265205B707269765D [ 126.050452] audit: type=1105 audit(1719903598.856:2493): pid=4624 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.061999] audit: type=1103 audit(1719903598.868:2494): pid=4626 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.279386] audit: type=1106 audit(1719903599.085:2495): pid=4624 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 126.287271] audit: type=1104 audit(1719903599.085:2496): pid=4624 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.304158] kauditd_printk_skb: 1 callbacks suppressed [ 131.304161] audit: type=1130 audit(1719903604.110:2498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.76:22-139.178.89.65:59760 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 131.468440] audit: type=1101 audit(1719903604.275:2499): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.472281] audit: type=1103 audit(1719903604.277:2500): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.488160] audit: type=1006 audit(1719903604.277:2501): pid=4638 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 131.489927] audit: type=1300 audit(1719903604.277:2501): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff07cc4ed0 a2=3 a3=7f8fec6b8480 items=0 ppid=1 pid=4638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.492538] audit: type=1327 audit(1719903604.277:2501): proctitle=737368643A20636F7265205B707269765D [ 131.511185] audit: type=1105 audit(1719903604.317:2502): pid=4638 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.515326] audit: type=1103 audit(1719903604.321:2503): pid=4640 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.710036] audit: type=1106 audit(1719903604.516:2504): pid=4638 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 131.712677] audit: type=1104 audit(1719903604.516:2505): pid=4638 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.747903] kauditd_printk_skb: 1 callbacks suppressed [ 136.747906] audit: type=1130 audit(1719903609.554:2507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.76:22-139.178.89.65:59986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.916989] audit: type=1101 audit(1719903609.723:2508): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.921179] audit: type=1103 audit(1719903609.727:2509): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.923936] audit: type=1006 audit(1719903609.727:2510): pid=4651 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 136.925361] audit: type=1300 audit(1719903609.727:2510): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffce7c9170 a2=3 a3=7fb4f21aa480 items=0 ppid=1 pid=4651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.928390] audit: type=1327 audit(1719903609.727:2510): proctitle=737368643A20636F7265205B707269765D [ 136.952543] audit: type=1105 audit(1719903609.758:2511): pid=4651 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.955941] audit: type=1103 audit(1719903609.762:2512): pid=4653 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.146426] audit: type=1106 audit(1719903609.952:2513): pid=4651 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 137.150077] audit: type=1104 audit(1719903609.956:2514): pid=4651 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.601247] kauditd_printk_skb: 57 callbacks suppressed [ 145.601250] audit: type=1130 audit(1719903618.407:2556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.76:22-139.178.89.65:32944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.766722] audit: type=1101 audit(1719903618.573:2557): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.780733] audit: type=1103 audit(1719903618.587:2558): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.784995] audit: type=1006 audit(1719903618.591:2559): pid=4711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 145.792572] audit: type=1300 audit(1719903618.591:2559): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffea32b280 a2=3 a3=7f18aaf10480 items=0 ppid=1 pid=4711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.799701] audit: type=1327 audit(1719903618.591:2559): proctitle=737368643A20636F7265205B707269765D [ 145.851785] audit: type=1105 audit(1719903618.658:2560): pid=4711 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.855912] audit: type=1103 audit(1719903618.662:2561): pid=4713 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.049767] audit: type=1106 audit(1719903618.856:2562): pid=4711 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 146.054132] audit: type=1104 audit(1719903618.856:2563): pid=4711 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.083824] kauditd_printk_skb: 7 callbacks suppressed [ 151.083828] audit: type=1130 audit(1719903623.890:2567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.76:22-139.178.89.65:32946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.261407] audit: type=1101 audit(1719903624.067:2568): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.267144] audit: type=1103 audit(1719903624.074:2569): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.271745] audit: type=1006 audit(1719903624.074:2570): pid=4726 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 151.275710] audit: type=1300 audit(1719903624.074:2570): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda6087540 a2=3 a3=7f1685d01480 items=0 ppid=1 pid=4726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.279962] audit: type=1327 audit(1719903624.074:2570): proctitle=737368643A20636F7265205B707269765D [ 151.294720] audit: type=1105 audit(1719903624.101:2571): pid=4726 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.298589] audit: type=1103 audit(1719903624.101:2572): pid=4728 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.578797] audit: type=1106 audit(1719903624.385:2573): pid=4726 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 151.582513] audit: type=1104 audit(1719903624.385:2574): pid=4726 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.623041] kauditd_printk_skb: 1 callbacks suppressed [ 156.623044] audit: type=1130 audit(1719903629.429:2576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.76:22-139.178.89.65:60312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.793295] audit: type=1101 audit(1719903629.599:2577): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.796226] audit: type=1103 audit(1719903629.601:2578): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.799252] audit: type=1006 audit(1719903629.601:2579): pid=4739 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 156.806138] audit: type=1300 audit(1719903629.601:2579): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8c5648c0 a2=3 a3=7fd56c9ec480 items=0 ppid=1 pid=4739 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.815377] audit: type=1327 audit(1719903629.601:2579): proctitle=737368643A20636F7265205B707269765D [ 156.831295] audit: type=1105 audit(1719903629.637:2580): pid=4739 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.836833] audit: type=1103 audit(1719903629.643:2581): pid=4743 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.047351] audit: type=1106 audit(1719903629.853:2582): pid=4739 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.051159] audit: type=1104 audit(1719903629.858:2583): pid=4739 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.083153] kauditd_printk_skb: 1 callbacks suppressed [ 162.083156] audit: type=1130 audit(1719903634.889:2585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.76:22-139.178.89.65:60324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.254658] audit: type=1101 audit(1719903635.061:2586): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.258248] audit: type=1103 audit(1719903635.064:2587): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.260814] audit: type=1006 audit(1719903635.064:2588): pid=4753 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 162.262434] audit: type=1300 audit(1719903635.064:2588): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff07dc7730 a2=3 a3=7f73d39b4480 items=0 ppid=1 pid=4753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.265455] audit: type=1327 audit(1719903635.064:2588): proctitle=737368643A20636F7265205B707269765D [ 162.283160] audit: type=1105 audit(1719903635.089:2589): pid=4753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.286662] audit: type=1103 audit(1719903635.093:2590): pid=4755 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.513975] audit: type=1106 audit(1719903635.320:2591): pid=4753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.517513] audit: type=1104 audit(1719903635.320:2592): pid=4753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 07:00:38 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: [ 167.231873] kauditd_printk_skb: 29 callbacks suppressed [ 167.231876] audit: type=1106 audit(1719903640.038:2618): pid=4933 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.240472] audit: type=1104 audit(1719903640.043:2619): pid=4933 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.247436] audit: type=1131 audit(1719903640.051:2620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.76:22-139.178.89.65:41920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.265651] audit: type=1130 audit(1719903640.072:2621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.76:22-139.178.89.65:41922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.459379] audit: type=1101 audit(1719903640.265:2622): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.462231] audit: type=1103 audit(1719903640.267:2623): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.465201] audit: type=1006 audit(1719903640.268:2624): pid=4944 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 167.473594] audit: type=1300 audit(1719903640.268:2624): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee539f650 a2=3 a3=7f4439248480 items=0 ppid=1 pid=4944 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.483109] audit: type=1327 audit(1719903640.268:2624): proctitle=737368643A20636F7265205B707269765D [ 167.504108] audit: type=1105 audit(1719903640.310:2625): pid=4944 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 172.259757] kauditd_printk_skb: 114 callbacks suppressed [ 172.259760] audit: type=1334 audit(1719903645.066:2686): prog-id=1111 op=LOAD [ 172.261015] audit: type=1300 audit(1719903645.066:2686): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff638e7140 a2=74 a3=7fff638e7140 items=0 ppid=5268 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 172.264098] audit: type=1327 audit(1719903645.066:2686): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 172.265138] audit: type=1334 audit(1719903645.066:2687): prog-id=1111 op=UNLOAD [ 172.265912] audit: type=1334 audit(1719903645.066:2688): prog-id=1112 op=LOAD [ 172.266790] audit: type=1300 audit(1719903645.066:2688): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff638e61c0 a2=90 a3=2 items=0 ppid=5268 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 172.269824] audit: type=1327 audit(1719903645.066:2688): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 172.270909] audit: type=1334 audit(1719903645.066:2689): prog-id=1112 op=UNLOAD [ 172.271794] audit: type=1334 audit(1719903645.066:2690): prog-id=1113 op=LOAD [ 172.272557] audit: type=1300 audit(1719903645.066:2690): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff638e61c0 a2=90 a3=2 items=0 ppid=5268 pid=5325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 172.860258] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni)) [ 176.678527] IPv6: ADDRCONF(NETDEV_CHANGE): lxc_health: link becomes ready [ 178.879801] kauditd_printk_skb: 3690 callbacks suppressed [ 178.879804] audit: type=1334 audit(1719903651.686:4464): prog-id=1941 op=LOAD [ 178.888133] audit: type=1300 audit(1719903651.686:4464): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc85f3e20 a2=74 a3=7ffdc85f3e20 items=0 ppid=5268 pid=5850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 178.891528] audit: type=1327 audit(1719903651.686:4464): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A0034375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 178.894594] audit: type=1334 audit(1719903651.700:4465): prog-id=1941 op=UNLOAD [ 178.896019] audit: type=1334 audit(1719903651.700:4466): prog-id=1942 op=LOAD [ 178.896873] audit: type=1300 audit(1719903651.700:4466): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdc85f3db0 a2=80 a3=0 items=0 ppid=5268 pid=5850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 178.901933] audit: type=1327 audit(1719903651.700:4466): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A0034375F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 178.904544] audit: type=1334 audit(1719903651.702:4467): prog-id=1942 op=UNLOAD [ 178.905621] audit: type=1334 audit(1719903651.707:4468): prog-id=1943 op=LOAD [ 178.906468] audit: type=1300 audit(1719903651.707:4468): arch=c000003e syscall=321 success=yes exit=38 a0=5 a1=7ffdc85f3b20 a2=80 a3=0 items=0 ppid=5268 pid=5850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) This is ip-172-31-29-76 (Linux x86_64 6.1.96-flatcar) 07:00:51 SSH host key: SHA256:lZCpN5ZbnYdb7t0hOi/NT8dr20Utq2BRC1hYBvIJtUc (ED25519) SSH host key: SHA256:epGDX4X2V/OVNZFyBsmj/E3TeUfHqomcyf5j73g2TQk (RSA) SSH host key: SHA256:8CqYMFi9mdbsJXfKjbSfNMkVhAsPpJuKgQFP9NikcWg (ECDSA) eth0: 172.31.29.76 fe80::48b:9bff:fe35:870f ip-172-31-29-76 login: [ 184.190892] kauditd_printk_skb: 498 callbacks suppressed [ 184.190895] audit: type=1106 audit(1719903656.997:4662): pid=4956 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.194268] audit: type=1104 audit(1719903656.997:4663): pid=4956 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.198336] audit: type=1131 audit(1719903657.004:4664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.76:22-139.178.89.65:41926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.770851] audit: type=1334 audit(1719903671.577:4665): prog-id=73 op=UNLOAD [ 198.771804] audit: type=1334 audit(1719903671.577:4666): prog-id=82 op=UNLOAD [ 199.708675] audit: type=1334 audit(1719903672.515:4667): prog-id=2043 op=LOAD [ 199.709601] audit: type=1334 audit(1719903672.515:4668): prog-id=2044 op=LOAD [ 199.710742] audit: type=1300 audit(1719903672.515:4668): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000133988 a2=78 a3=0 items=0 ppid=2605 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.714643] audit: type=1327 audit(1719903672.515:4668): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466663836353765366332326531666232653061633038626233333833 [ 199.717484] audit: type=1334 audit(1719903672.515:4669): prog-id=2045 op=LOAD [ 199.718830] audit: type=1300 audit(1719903672.515:4669): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000133720 a2=78 a3=0 items=0 ppid=2605 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.722780] audit: type=1327 audit(1719903672.515:4669): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466663836353765366332326531666232653061633038626233333833 [ 199.725852] audit: type=1334 audit(1719903672.515:4670): prog-id=2045 op=UNLOAD [ 204.799177] kauditd_printk_skb: 10 callbacks suppressed [ 204.799180] audit: type=1334 audit(1719903677.606:4675): prog-id=81 op=UNLOAD [ 204.802465] audit: type=1334 audit(1719903677.606:4676): prog-id=92 op=UNLOAD [ 205.721504] audit: type=1334 audit(1719903678.528:4677): prog-id=2047 op=LOAD [ 205.723028] audit: type=1334 audit(1719903678.530:4678): prog-id=2048 op=LOAD [ 205.723728] audit: type=1300 audit(1719903678.530:4678): arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00010d988 a2=78 a3=0 items=0 ppid=2593 pid=6024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.726192] audit: type=1327 audit(1719903678.530:4678): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653935376131653431303062646665303034383634303764613534 [ 205.728680] audit: type=1334 audit(1719903678.530:4679): prog-id=2049 op=LOAD [ 205.729235] audit: type=1300 audit(1719903678.530:4679): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00010d720 a2=78 a3=0 items=0 ppid=2593 pid=6024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.732291] audit: type=1327 audit(1719903678.530:4679): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136653935376131653431303062646665303034383634303764613534 [ 205.735420] audit: type=1334 audit(1719903678.530:4680): prog-id=2049 op=UNLOAD