=-13 a0=8 a1=4000970000 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 56.300096] audit: type=1327 audit(1719880056.802:334): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.307111] audit: type=1400 audit(1719880056.814:335): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.311227] audit: type=1300 audit(1719880056.814:335): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f25ac0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 56.320088] audit: type=1327 audit(1719880056.814:335): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 56.573571] audit: type=1400 audit(1719880057.091:336): avc: denied { watch } for pid=2832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c692,c799 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.578594] audit: type=1400 audit(1719880057.091:337): avc: denied { watch } for pid=2832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="overlay" ino=7796 scontext=system_u:system_r:container_t:s0:c692,c799 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 56.586100] audit: type=1300 audit(1719880057.091:337): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=400528f6e0 a2=fc6 a3=0 items=0 ppid=2672 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c692,c799 key=(null) [ 56.594104] audit: type=1327 audit(1719880057.091:337): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E313130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 59.218811] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2897) [ 59.554672] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2898) [ 59.942969] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2898) [ 62.846806] kauditd_printk_skb: 59 callbacks suppressed [ 62.846811] audit: type=1400 audit(1719880063.365:385): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 62.853659] audit: type=1300 audit(1719880063.365:385): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40015cdae0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 62.875488] audit: type=1327 audit(1719880063.365:385): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 62.886396] audit: type=1400 audit(1719880063.405:386): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 62.893399] audit: type=1300 audit(1719880063.405:386): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40015cdb20 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 62.910153] audit: type=1400 audit(1719880063.428:388): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 62.915433] audit: type=1300 audit(1719880063.428:388): arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=40015cdfe0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 62.924486] audit: type=1327 audit(1719880063.428:388): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 62.932762] audit: type=1400 audit(1719880063.425:387): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 62.939523] audit: type=1300 audit(1719880063.425:387): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40015cde20 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 75.762056] kauditd_printk_skb: 7 callbacks suppressed [ 75.762060] audit: type=1334 audit(1719880076.280:394): prog-id=105 op=LOAD [ 75.765390] audit: type=1334 audit(1719880076.283:395): prog-id=106 op=LOAD [ 75.766701] audit: type=1300 audit(1719880076.283:395): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001338b0 a2=78 a3=0 items=0 ppid=3317 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.771946] audit: type=1327 audit(1719880076.283:395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239356564386365373464393934326435353663363664653138373633 [ 75.777394] audit: type=1334 audit(1719880076.284:396): prog-id=107 op=LOAD [ 75.779594] audit: type=1300 audit(1719880076.284:396): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000133640 a2=78 a3=0 items=0 ppid=3317 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.794915] audit: type=1327 audit(1719880076.284:396): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239356564386365373464393934326435353663363664653138373633 [ 75.800824] audit: type=1334 audit(1719880076.285:397): prog-id=107 op=UNLOAD [ 75.802141] audit: type=1334 audit(1719880076.285:398): prog-id=106 op=UNLOAD [ 75.803367] audit: type=1334 audit(1719880076.285:399): prog-id=108 op=LOAD [ 83.194948] kauditd_printk_skb: 190 callbacks suppressed [ 83.194953] audit: type=1325 audit(1719880083.712:468): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3597 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 83.198813] audit: type=1300 audit(1719880083.712:468): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffdd68a140 a2=0 a3=1 items=0 ppid=3412 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.205744] audit: type=1327 audit(1719880083.712:468): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 83.210228] audit: type=1325 audit(1719880083.724:469): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3597 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 83.213437] audit: type=1300 audit(1719880083.724:469): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdd68a140 a2=0 a3=1 items=0 ppid=3412 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.220052] audit: type=1327 audit(1719880083.724:469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 83.239706] audit: type=1325 audit(1719880083.757:470): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3599 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 83.242474] audit: type=1300 audit(1719880083.757:470): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffd27e86a0 a2=0 a3=1 items=0 ppid=3412 pid=3599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 83.248308] audit: type=1327 audit(1719880083.757:470): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 83.254306] audit: type=1325 audit(1719880083.772:471): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3599 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.268051] kauditd_printk_skb: 65 callbacks suppressed [ 88.268056] audit: type=1334 audit(1719880088.785:503): prog-id=134 op=UNLOAD [ 88.294535] audit: type=1325 audit(1719880088.811:504): table=filter:97 family=2 entries=16 op=nft_register_rule pid=3928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.297241] audit: type=1300 audit(1719880088.811:504): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffeacfa8f0 a2=0 a3=1 items=0 ppid=3412 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.302910] audit: type=1327 audit(1719880088.811:504): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.306058] audit: type=1325 audit(1719880088.811:505): table=nat:98 family=2 entries=12 op=nft_register_rule pid=3928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.312794] audit: type=1300 audit(1719880088.811:505): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeacfa8f0 a2=0 a3=1 items=0 ppid=3412 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.321765] audit: type=1327 audit(1719880088.811:505): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 88.344357] audit: type=1325 audit(1719880088.861:506): table=filter:99 family=2 entries=16 op=nft_register_rule pid=3942 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 88.347775] audit: type=1300 audit(1719880088.861:506): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffdfb35ca0 a2=0 a3=1 items=0 ppid=3412 pid=3942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 88.355805] audit: type=1327 audit(1719880088.861:506): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 95.008909] kauditd_printk_skb: 53 callbacks suppressed [ 95.008926] audit: type=1334 audit(1719880095.525:534): prog-id=150 op=LOAD [ 95.011146] audit: type=1300 audit(1719880095.525:534): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001398b0 a2=78 a3=0 items=0 ppid=4086 pid=4200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.016046] audit: type=1327 audit(1719880095.525:534): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343034313734616661336139343834386631323331366634353034 [ 95.020876] audit: type=1334 audit(1719880095.525:535): prog-id=151 op=LOAD [ 95.022338] audit: type=1300 audit(1719880095.525:535): arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000139640 a2=78 a3=0 items=0 ppid=4086 pid=4200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.027564] audit: type=1327 audit(1719880095.525:535): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234343034313734616661336139343834386631323331366634353034 [ 95.033078] audit: type=1334 audit(1719880095.525:536): prog-id=151 op=UNLOAD [ 95.034373] audit: type=1334 audit(1719880095.525:537): prog-id=150 op=UNLOAD [ 95.035653] audit: type=1334 audit(1719880095.526:538): prog-id=152 op=LOAD [ 95.036907] audit: type=1300 audit(1719880095.526:538): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000139b10 a2=78 a3=0 items=0 ppid=4086 pid=4200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.001073] kauditd_printk_skb: 13 callbacks suppressed [ 102.001078] audit: type=1325 audit(1719880102.517:549): table=filter:101 family=2 entries=15 op=nft_register_rule pid=4479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.004924] audit: type=1300 audit(1719880102.517:549): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffc13805e0 a2=0 a3=1 items=0 ppid=3412 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.010278] audit: type=1327 audit(1719880102.517:549): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 102.012936] audit: type=1325 audit(1719880102.520:550): table=nat:102 family=2 entries=19 op=nft_register_chain pid=4479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 102.015673] audit: type=1300 audit(1719880102.520:550): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc13805e0 a2=0 a3=1 items=0 ppid=3412 pid=4479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.021118] audit: type=1327 audit(1719880102.520:550): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 104.510274] audit: type=1130 audit(1719880105.027:551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.110:22-139.178.89.65:59152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 104.707476] audit: type=1101 audit(1719880105.224:552): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 104.712320] audit: type=1103 audit(1719880105.230:553): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 104.716796] audit: type=1006 audit(1719880105.230:554): pid=4481 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 105.005177] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 105.006658] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 107.057236] kauditd_printk_skb: 18 callbacks suppressed [ 107.057240] audit: type=1400 audit(1719880107.574:565): avc: denied { write } for pid=4612 comm="tee" name="fd" dev="proc" ino=23934 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 107.063316] audit: type=1300 audit(1719880107.574:565): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffff42a20 a2=241 a3=1b6 items=1 ppid=4570 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.069064] audit: type=1307 audit(1719880107.574:565): cwd="/etc/service/enabled/confd/log" [ 107.070564] audit: type=1302 audit(1719880107.574:565): item=0 name="/dev/fd/63" inode=23913 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 107.076616] audit: type=1327 audit(1719880107.574:565): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 107.081206] audit: type=1400 audit(1719880107.593:566): avc: denied { write } for pid=4621 comm="tee" name="fd" dev="proc" ino=23142 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 107.085245] audit: type=1300 audit(1719880107.593:566): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd39b2a20 a2=241 a3=1b6 items=1 ppid=4580 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.099073] audit: type=1307 audit(1719880107.593:566): cwd="/etc/service/enabled/felix/log" [ 107.108753] audit: type=1302 audit(1719880107.593:566): item=0 name="/dev/fd/63" inode=23928 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 107.124603] audit: type=1327 audit(1719880107.593:566): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:29 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 109.735477] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 109.736765] IPv6: ADDRCONF(NETDEV_CHANGE): cali4f6b018bc29: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:30 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 110.924286] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 110.925702] IPv6: ADDRCONF(NETDEV_CHANGE): cali1541c0258cb: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:32 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 111.903744] IPv6: ADDRCONF(NETDEV_CHANGE): cali3aa072cbee1: link becomes ready [ 112.066392] kauditd_printk_skb: 141 callbacks suppressed [ 112.066397] audit: type=1334 audit(1719880112.583:626): prog-id=176 op=LOAD [ 112.070687] audit: type=1334 audit(1719880112.587:627): prog-id=177 op=LOAD [ 112.071963] audit: type=1300 audit(1719880112.587:627): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001338b0 a2=78 a3=0 items=0 ppid=5121 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.076817] audit: type=1327 audit(1719880112.587:627): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643266333930306161353865636364356563363566303038303766 [ 112.081530] audit: type=1334 audit(1719880112.587:628): prog-id=178 op=LOAD [ 112.083628] audit: type=1300 audit(1719880112.587:628): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000133640 a2=78 a3=0 items=0 ppid=5121 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.088467] audit: type=1327 audit(1719880112.587:628): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643266333930306161353865636364356563363566303038303766 [ 112.093115] audit: type=1334 audit(1719880112.589:629): prog-id=178 op=UNLOAD [ 112.094576] audit: type=1334 audit(1719880112.589:630): prog-id=177 op=UNLOAD [ 112.095849] audit: type=1334 audit(1719880112.589:631): prog-id=179 op=LOAD [ 112.690855] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 112.692075] IPv6: ADDRCONF(NETDEV_CHANGE): cali2653219cec4: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:34 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:35 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:36 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 117.363302] kauditd_printk_skb: 83 callbacks suppressed [ 117.363309] audit: type=1106 audit(1719880117.879:673): pid=5365 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.371400] audit: type=1104 audit(1719880117.879:674): pid=5365 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.379298] audit: type=1131 audit(1719880117.891:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.110:22-139.178.89.65:56184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.404843] audit: type=1130 audit(1719880117.923:676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.110:22-139.178.89.65:56188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.597557] audit: type=1101 audit(1719880118.113:677): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.605252] audit: type=1103 audit(1719880118.121:678): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.611332] audit: type=1006 audit(1719880118.121:679): pid=5392 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 117.614889] audit: type=1300 audit(1719880118.121:679): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0fe3dd0 a2=3 a3=1 items=0 ppid=1 pid=5392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.620961] audit: type=1327 audit(1719880118.121:679): proctitle=737368643A20636F7265205B707269765D [ 117.646074] audit: type=1105 audit(1719880118.163:680): pid=5392 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.908220] kauditd_printk_skb: 15 callbacks suppressed [ 122.908225] audit: type=1400 audit(1719880123.426:690): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.913868] audit: type=1300 audit(1719880123.426:690): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021473c0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.919739] audit: type=1327 audit(1719880123.426:690): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 122.924374] audit: type=1400 audit(1719880123.434:691): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.928503] audit: type=1300 audit(1719880123.434:691): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002576da0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.933996] audit: type=1327 audit(1719880123.434:691): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 122.946854] audit: type=1400 audit(1719880123.465:693): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.951244] audit: type=1400 audit(1719880123.465:692): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.955427] audit: type=1300 audit(1719880123.465:692): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002576dc0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.960889] audit: type=1327 audit(1719880123.465:692): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 128.576370] kauditd_printk_skb: 13 callbacks suppressed [ 128.576376] audit: type=1130 audit(1719880129.093:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.110:22-139.178.89.65:57368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 128.742269] audit: type=1101 audit(1719880129.261:704): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.749365] audit: type=1103 audit(1719880129.263:705): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.754358] audit: type=1006 audit(1719880129.263:706): pid=5762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 128.758449] audit: type=1300 audit(1719880129.263:706): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff125e510 a2=3 a3=1 items=0 ppid=1 pid=5762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.763884] audit: type=1327 audit(1719880129.263:706): proctitle=737368643A20636F7265205B707269765D [ 128.787290] audit: type=1105 audit(1719880129.306:707): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.792682] audit: type=1103 audit(1719880129.309:708): pid=5764 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.047266] audit: type=1106 audit(1719880129.566:709): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.053849] audit: type=1104 audit(1719880129.567:710): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.094571] kauditd_printk_skb: 1 callbacks suppressed [ 134.094575] audit: type=1130 audit(1719880134.613:712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.110:22-139.178.89.65:57376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.267303] audit: type=1101 audit(1719880134.786:713): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.274543] audit: type=1103 audit(1719880134.793:714): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.278979] audit: type=1006 audit(1719880134.793:715): pid=5776 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 134.282143] audit: type=1300 audit(1719880134.793:715): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded845c0 a2=3 a3=1 items=0 ppid=1 pid=5776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.287573] audit: type=1327 audit(1719880134.793:715): proctitle=737368643A20636F7265205B707269765D [ 134.309466] audit: type=1105 audit(1719880134.828:716): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.315583] audit: type=1103 audit(1719880134.834:717): pid=5778 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.589697] audit: type=1106 audit(1719880135.108:718): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.595598] audit: type=1104 audit(1719880135.108:719): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.628970] kauditd_printk_skb: 1 callbacks suppressed [ 139.628975] audit: type=1130 audit(1719880140.148:721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.110:22-139.178.89.65:52722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.801677] audit: type=1101 audit(1719880140.320:722): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.808548] audit: type=1103 audit(1719880140.327:723): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.813848] audit: type=1006 audit(1719880140.327:724): pid=5796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 139.817071] audit: type=1300 audit(1719880140.327:724): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff198c480 a2=3 a3=1 items=0 ppid=1 pid=5796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.822087] audit: type=1327 audit(1719880140.327:724): proctitle=737368643A20636F7265205B707269765D [ 139.847233] audit: type=1105 audit(1719880140.366:725): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.852624] audit: type=1103 audit(1719880140.370:726): pid=5798 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.102344] audit: type=1106 audit(1719880140.621:727): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.109118] audit: type=1104 audit(1719880140.621:728): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.141648] kauditd_printk_skb: 1 callbacks suppressed [ 145.141653] audit: type=1130 audit(1719880145.659:730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.110:22-139.178.89.65:52724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.310237] audit: type=1101 audit(1719880145.828:731): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.317049] audit: type=1103 audit(1719880145.835:732): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.321817] audit: type=1006 audit(1719880145.835:733): pid=5808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 145.324696] audit: type=1300 audit(1719880145.835:733): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff385dd80 a2=3 a3=1 items=0 ppid=1 pid=5808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.330002] audit: type=1327 audit(1719880145.835:733): proctitle=737368643A20636F7265205B707269765D [ 145.357365] audit: type=1105 audit(1719880145.875:734): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.363457] audit: type=1103 audit(1719880145.881:735): pid=5810 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.619759] audit: type=1106 audit(1719880146.137:736): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.626057] audit: type=1104 audit(1719880146.138:737): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.184092] kauditd_printk_skb: 20 callbacks suppressed [ 150.184097] audit: type=1106 audit(1719880150.702:754): pid=5829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.191234] audit: type=1104 audit(1719880150.702:755): pid=5829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.199508] audit: type=1131 audit(1719880150.708:756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.110:22-139.178.89.65:52746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.240648] audit: type=1130 audit(1719880150.756:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.110:22-139.178.89.65:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.300530] audit: type=1325 audit(1719880150.818:758): table=filter:117 family=2 entries=8 op=nft_register_rule pid=5876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.307993] audit: type=1300 audit(1719880150.818:758): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffffa9ec2d0 a2=0 a3=1 items=0 ppid=3412 pid=5876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.318657] audit: type=1327 audit(1719880150.818:758): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 150.325854] audit: type=1325 audit(1719880150.833:759): table=nat:118 family=2 entries=20 op=nft_register_rule pid=5876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.330609] audit: type=1300 audit(1719880150.833:759): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffffa9ec2d0 a2=0 a3=1 items=0 ppid=3412 pid=5876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.336058] audit: type=1327 audit(1719880150.833:759): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 153.486053] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 153.487245] IPv6: ADDRCONF(NETDEV_CHANGE): caliceb64241c08: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:29:16 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 156.654475] kauditd_printk_skb: 54 callbacks suppressed [ 156.655506] audit: type=1130 audit(1719880157.171:790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.110:22-139.178.89.65:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.893892] audit: type=1101 audit(1719880157.412:791): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.898404] audit: type=1103 audit(1719880157.412:792): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.915787] audit: type=1006 audit(1719880157.412:793): pid=5988 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 156.918503] audit: type=1300 audit(1719880157.412:793): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0d48e90 a2=3 a3=1 items=0 ppid=1 pid=5988 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.932429] audit: type=1327 audit(1719880157.412:793): proctitle=737368643A20636F7265205B707269765D [ 156.936622] audit: type=1105 audit(1719880157.455:794): pid=5988 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.941626] audit: type=1103 audit(1719880157.455:795): pid=6023 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.010270] audit: type=1334 audit(1719880157.528:796): prog-id=198 op=LOAD [ 157.012942] audit: type=1334 audit(1719880157.531:797): prog-id=199 op=LOAD [ 162.256720] kauditd_printk_skb: 37 callbacks suppressed [ 162.256725] audit: type=1130 audit(1719880162.775:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.110:22-139.178.89.65:40462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.424670] audit: type=1101 audit(1719880162.943:814): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.431454] audit: type=1103 audit(1719880162.949:815): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.436745] audit: type=1006 audit(1719880162.950:816): pid=6078 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 162.439981] audit: type=1300 audit(1719880162.950:816): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee323670 a2=3 a3=1 items=0 ppid=1 pid=6078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.445063] audit: type=1327 audit(1719880162.950:816): proctitle=737368643A20636F7265205B707269765D [ 162.466473] audit: type=1105 audit(1719880162.984:817): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.471820] audit: type=1103 audit(1719880162.988:818): pid=6080 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.707595] audit: type=1106 audit(1719880163.226:819): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.714662] audit: type=1104 audit(1719880163.226:820): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.748338] kauditd_printk_skb: 1 callbacks suppressed [ 167.748343] audit: type=1130 audit(1719880168.267:822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.110:22-139.178.89.65:48936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.926637] audit: type=1101 audit(1719880168.446:823): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.933687] audit: type=1103 audit(1719880168.453:824): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.938445] audit: type=1006 audit(1719880168.453:825): pid=6095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 167.941675] audit: type=1300 audit(1719880168.453:825): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea67b940 a2=3 a3=1 items=0 ppid=1 pid=6095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.946622] audit: type=1327 audit(1719880168.453:825): proctitle=737368643A20636F7265205B707269765D [ 167.975409] audit: type=1105 audit(1719880168.494:826): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.982052] audit: type=1103 audit(1719880168.501:827): pid=6097 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.229344] audit: type=1106 audit(1719880168.748:828): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.238428] audit: type=1104 audit(1719880168.751:829): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.267246] kauditd_printk_skb: 1 callbacks suppressed [ 173.267251] audit: type=1130 audit(1719880173.786:831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.110:22-139.178.89.65:48950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.433932] audit: type=1101 audit(1719880173.953:832): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.440831] audit: type=1103 audit(1719880173.960:833): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.445552] audit: type=1006 audit(1719880173.960:834): pid=6112 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 173.448677] audit: type=1300 audit(1719880173.960:834): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff386ea70 a2=3 a3=1 items=0 ppid=1 pid=6112 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.453562] audit: type=1327 audit(1719880173.960:834): proctitle=737368643A20636F7265205B707269765D [ 173.478163] audit: type=1105 audit(1719880173.997:835): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.484412] audit: type=1103 audit(1719880174.004:836): pid=6114 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.729597] audit: type=1106 audit(1719880174.249:837): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.736128] audit: type=1104 audit(1719880174.250:838): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.766603] kauditd_printk_skb: 25 callbacks suppressed [ 178.766608] audit: type=1130 audit(1719880179.286:848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.110:22-139.178.89.65:39478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.944897] audit: type=1101 audit(1719880179.464:849): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.951957] audit: type=1103 audit(1719880179.471:850): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.956694] audit: type=1006 audit(1719880179.472:851): pid=6168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 178.960378] audit: type=1300 audit(1719880179.472:851): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff88cf3a0 a2=3 a3=1 items=0 ppid=1 pid=6168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.966424] audit: type=1327 audit(1719880179.472:851): proctitle=737368643A20636F7265205B707269765D [ 178.992878] audit: type=1105 audit(1719880179.512:852): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.999350] audit: type=1103 audit(1719880179.519:853): pid=6170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.288264] audit: type=1106 audit(1719880179.805:854): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.294225] audit: type=1104 audit(1719880179.805:855): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.323233] kauditd_printk_skb: 13 callbacks suppressed [ 184.323237] audit: type=1130 audit(1719880184.842:861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.110:22-139.178.89.65:39482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.492721] audit: type=1101 audit(1719880185.012:862): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.500007] audit: type=1103 audit(1719880185.019:863): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.504866] audit: type=1006 audit(1719880185.024:864): pid=6188 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 184.508113] audit: type=1300 audit(1719880185.024:864): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddb15a20 a2=3 a3=1 items=0 ppid=1 pid=6188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.513661] audit: type=1327 audit(1719880185.024:864): proctitle=737368643A20636F7265205B707269765D [ 184.541644] audit: type=1105 audit(1719880185.061:865): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.548349] audit: type=1103 audit(1719880185.067:866): pid=6190 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.788943] audit: type=1106 audit(1719880185.308:867): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.798961] audit: type=1104 audit(1719880185.309:868): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.834597] kauditd_printk_skb: 7 callbacks suppressed [ 189.834601] audit: type=1130 audit(1719880190.354:872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.110:22-139.178.89.65:47702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.006622] audit: type=1101 audit(1719880190.526:873): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 104.712320] audit: type=1103 audit(1719880105.230:553): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 104.716796] audit: type=1006 audit(1719880105.230:554): pid=4481 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 105.005177] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 105.006658] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 107.057236] kauditd_printk_skb: 18 callbacks suppressed [ 107.057240] audit: type=1400 audit(1719880107.574:565): avc: denied { write } for pid=4612 comm="tee" name="fd" dev="proc" ino=23934 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 107.063316] audit: type=1300 audit(1719880107.574:565): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffff42a20 a2=241 a3=1b6 items=1 ppid=4570 pid=4612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.069064] audit: type=1307 audit(1719880107.574:565): cwd="/etc/service/enabled/confd/log" [ 107.070564] audit: type=1302 audit(1719880107.574:565): item=0 name="/dev/fd/63" inode=23913 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 107.076616] audit: type=1327 audit(1719880107.574:565): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 107.081206] audit: type=1400 audit(1719880107.593:566): avc: denied { write } for pid=4621 comm="tee" name="fd" dev="proc" ino=23142 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 107.085245] audit: type=1300 audit(1719880107.593:566): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd39b2a20 a2=241 a3=1b6 items=1 ppid=4580 pid=4621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 107.099073] audit: type=1307 audit(1719880107.593:566): cwd="/etc/service/enabled/felix/log" [ 107.108753] audit: type=1302 audit(1719880107.593:566): item=0 name="/dev/fd/63" inode=23928 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 107.124603] audit: type=1327 audit(1719880107.593:566): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:29 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 109.735477] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 109.736765] IPv6: ADDRCONF(NETDEV_CHANGE): cali4f6b018bc29: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:30 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 110.924286] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 110.925702] IPv6: ADDRCONF(NETDEV_CHANGE): cali1541c0258cb: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:32 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 111.903744] IPv6: ADDRCONF(NETDEV_CHANGE): cali3aa072cbee1: link becomes ready [ 112.066392] kauditd_printk_skb: 141 callbacks suppressed [ 112.066397] audit: type=1334 audit(1719880112.583:626): prog-id=176 op=LOAD [ 112.070687] audit: type=1334 audit(1719880112.587:627): prog-id=177 op=LOAD [ 112.071963] audit: type=1300 audit(1719880112.587:627): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001338b0 a2=78 a3=0 items=0 ppid=5121 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.076817] audit: type=1327 audit(1719880112.587:627): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643266333930306161353865636364356563363566303038303766 [ 112.081530] audit: type=1334 audit(1719880112.587:628): prog-id=178 op=LOAD [ 112.083628] audit: type=1300 audit(1719880112.587:628): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000133640 a2=78 a3=0 items=0 ppid=5121 pid=5131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.088467] audit: type=1327 audit(1719880112.587:628): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643266333930306161353865636364356563363566303038303766 [ 112.093115] audit: type=1334 audit(1719880112.589:629): prog-id=178 op=UNLOAD [ 112.094576] audit: type=1334 audit(1719880112.589:630): prog-id=177 op=UNLOAD [ 112.095849] audit: type=1334 audit(1719880112.589:631): prog-id=179 op=LOAD [ 112.690855] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 112.692075] IPv6: ADDRCONF(NETDEV_CHANGE): cali2653219cec4: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:34 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:35 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:28:36 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 117.363302] kauditd_printk_skb: 83 callbacks suppressed [ 117.363309] audit: type=1106 audit(1719880117.879:673): pid=5365 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.371400] audit: type=1104 audit(1719880117.879:674): pid=5365 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.379298] audit: type=1131 audit(1719880117.891:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.110:22-139.178.89.65:56184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.404843] audit: type=1130 audit(1719880117.923:676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.110:22-139.178.89.65:56188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.597557] audit: type=1101 audit(1719880118.113:677): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.605252] audit: type=1103 audit(1719880118.121:678): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 117.611332] audit: type=1006 audit(1719880118.121:679): pid=5392 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 117.614889] audit: type=1300 audit(1719880118.121:679): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0fe3dd0 a2=3 a3=1 items=0 ppid=1 pid=5392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.620961] audit: type=1327 audit(1719880118.121:679): proctitle=737368643A20636F7265205B707269765D [ 117.646074] audit: type=1105 audit(1719880118.163:680): pid=5392 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 122.908220] kauditd_printk_skb: 15 callbacks suppressed [ 122.908225] audit: type=1400 audit(1719880123.426:690): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.913868] audit: type=1300 audit(1719880123.426:690): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021473c0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.919739] audit: type=1327 audit(1719880123.426:690): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 122.924374] audit: type=1400 audit(1719880123.434:691): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.928503] audit: type=1300 audit(1719880123.434:691): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002576da0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.933996] audit: type=1327 audit(1719880123.434:691): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 122.946854] audit: type=1400 audit(1719880123.465:693): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.951244] audit: type=1400 audit(1719880123.465:692): avc: denied { watch } for pid=2841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c412,c563 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 122.955427] audit: type=1300 audit(1719880123.465:692): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002576dc0 a2=fc6 a3=0 items=0 ppid=2674 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c412,c563 key=(null) [ 122.960889] audit: type=1327 audit(1719880123.465:692): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 128.576370] kauditd_printk_skb: 13 callbacks suppressed [ 128.576376] audit: type=1130 audit(1719880129.093:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.110:22-139.178.89.65:57368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 128.742269] audit: type=1101 audit(1719880129.261:704): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.749365] audit: type=1103 audit(1719880129.263:705): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.754358] audit: type=1006 audit(1719880129.263:706): pid=5762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 128.758449] audit: type=1300 audit(1719880129.263:706): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff125e510 a2=3 a3=1 items=0 ppid=1 pid=5762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.763884] audit: type=1327 audit(1719880129.263:706): proctitle=737368643A20636F7265205B707269765D [ 128.787290] audit: type=1105 audit(1719880129.306:707): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 128.792682] audit: type=1103 audit(1719880129.309:708): pid=5764 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.047266] audit: type=1106 audit(1719880129.566:709): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.053849] audit: type=1104 audit(1719880129.567:710): pid=5762 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.094571] kauditd_printk_skb: 1 callbacks suppressed [ 134.094575] audit: type=1130 audit(1719880134.613:712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.110:22-139.178.89.65:57376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.267303] audit: type=1101 audit(1719880134.786:713): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.274543] audit: type=1103 audit(1719880134.793:714): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.278979] audit: type=1006 audit(1719880134.793:715): pid=5776 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 134.282143] audit: type=1300 audit(1719880134.793:715): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded845c0 a2=3 a3=1 items=0 ppid=1 pid=5776 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.287573] audit: type=1327 audit(1719880134.793:715): proctitle=737368643A20636F7265205B707269765D [ 134.309466] audit: type=1105 audit(1719880134.828:716): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.315583] audit: type=1103 audit(1719880134.834:717): pid=5778 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.589697] audit: type=1106 audit(1719880135.108:718): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 134.595598] audit: type=1104 audit(1719880135.108:719): pid=5776 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.628970] kauditd_printk_skb: 1 callbacks suppressed [ 139.628975] audit: type=1130 audit(1719880140.148:721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.110:22-139.178.89.65:52722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 139.801677] audit: type=1101 audit(1719880140.320:722): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.808548] audit: type=1103 audit(1719880140.327:723): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.813848] audit: type=1006 audit(1719880140.327:724): pid=5796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 139.817071] audit: type=1300 audit(1719880140.327:724): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff198c480 a2=3 a3=1 items=0 ppid=1 pid=5796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.822087] audit: type=1327 audit(1719880140.327:724): proctitle=737368643A20636F7265205B707269765D [ 139.847233] audit: type=1105 audit(1719880140.366:725): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 139.852624] audit: type=1103 audit(1719880140.370:726): pid=5798 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.102344] audit: type=1106 audit(1719880140.621:727): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 140.109118] audit: type=1104 audit(1719880140.621:728): pid=5796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.141648] kauditd_printk_skb: 1 callbacks suppressed [ 145.141653] audit: type=1130 audit(1719880145.659:730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.110:22-139.178.89.65:52724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 145.310237] audit: type=1101 audit(1719880145.828:731): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.317049] audit: type=1103 audit(1719880145.835:732): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.321817] audit: type=1006 audit(1719880145.835:733): pid=5808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 145.324696] audit: type=1300 audit(1719880145.835:733): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff385dd80 a2=3 a3=1 items=0 ppid=1 pid=5808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.330002] audit: type=1327 audit(1719880145.835:733): proctitle=737368643A20636F7265205B707269765D [ 145.357365] audit: type=1105 audit(1719880145.875:734): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.363457] audit: type=1103 audit(1719880145.881:735): pid=5810 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.619759] audit: type=1106 audit(1719880146.137:736): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 145.626057] audit: type=1104 audit(1719880146.138:737): pid=5808 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.184092] kauditd_printk_skb: 20 callbacks suppressed [ 150.184097] audit: type=1106 audit(1719880150.702:754): pid=5829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.191234] audit: type=1104 audit(1719880150.702:755): pid=5829 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 150.199508] audit: type=1131 audit(1719880150.708:756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.110:22-139.178.89.65:52746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.240648] audit: type=1130 audit(1719880150.756:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.110:22-139.178.89.65:56322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 150.300530] audit: type=1325 audit(1719880150.818:758): table=filter:117 family=2 entries=8 op=nft_register_rule pid=5876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.307993] audit: type=1300 audit(1719880150.818:758): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffffa9ec2d0 a2=0 a3=1 items=0 ppid=3412 pid=5876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.318657] audit: type=1327 audit(1719880150.818:758): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 150.325854] audit: type=1325 audit(1719880150.833:759): table=nat:118 family=2 entries=20 op=nft_register_rule pid=5876 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.330609] audit: type=1300 audit(1719880150.833:759): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffffa9ec2d0 a2=0 a3=1 items=0 ppid=3412 pid=5876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.336058] audit: type=1327 audit(1719880150.833:759): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 153.486053] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 153.487245] IPv6: ADDRCONF(NETDEV_CHANGE): caliceb64241c08: link becomes ready This is ip-172-31-29-110 (Linux aarch64 6.1.96-flatcar) 00:29:16 SSH host key: SHA256:Gq3+MAp5JLY7QL29HN5l570jTl4swTJyjFAJ2Wz/xHM (ECDSA) SSH host key: SHA256:P0XIeTBrvufcDtHfyZQDL17nuYVbViyL+as99fHBUZk (RSA) SSH host key: SHA256:Uglixsh3IFU8IUcQR9JVrecmvgGfLKrF56V8vj98kDc (ED25519) eth0: 172.31.29.110 fe80::451:d0ff:fe3a:30c5 ip-172-31-29-110 login: [ 156.654475] kauditd_printk_skb: 54 callbacks suppressed [ 156.655506] audit: type=1130 audit(1719880157.171:790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.110:22-139.178.89.65:56328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.893892] audit: type=1101 audit(1719880157.412:791): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.898404] audit: type=1103 audit(1719880157.412:792): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.915787] audit: type=1006 audit(1719880157.412:793): pid=5988 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 156.918503] audit: type=1300 audit(1719880157.412:793): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0d48e90 a2=3 a3=1 items=0 ppid=1 pid=5988 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.932429] audit: type=1327 audit(1719880157.412:793): proctitle=737368643A20636F7265205B707269765D [ 156.936622] audit: type=1105 audit(1719880157.455:794): pid=5988 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 156.941626] audit: type=1103 audit(1719880157.455:795): pid=6023 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.010270] audit: type=1334 audit(1719880157.528:796): prog-id=198 op=LOAD [ 157.012942] audit: type=1334 audit(1719880157.531:797): prog-id=199 op=LOAD [ 162.256720] kauditd_printk_skb: 37 callbacks suppressed [ 162.256725] audit: type=1130 audit(1719880162.775:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.110:22-139.178.89.65:40462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.424670] audit: type=1101 audit(1719880162.943:814): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.431454] audit: type=1103 audit(1719880162.949:815): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.436745] audit: type=1006 audit(1719880162.950:816): pid=6078 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 162.439981] audit: type=1300 audit(1719880162.950:816): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee323670 a2=3 a3=1 items=0 ppid=1 pid=6078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.445063] audit: type=1327 audit(1719880162.950:816): proctitle=737368643A20636F7265205B707269765D [ 162.466473] audit: type=1105 audit(1719880162.984:817): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.471820] audit: type=1103 audit(1719880162.988:818): pid=6080 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.707595] audit: type=1106 audit(1719880163.226:819): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 162.714662] audit: type=1104 audit(1719880163.226:820): pid=6078 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.748338] kauditd_printk_skb: 1 callbacks suppressed [ 167.748343] audit: type=1130 audit(1719880168.267:822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.110:22-139.178.89.65:48936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.926637] audit: type=1101 audit(1719880168.446:823): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.933687] audit: type=1103 audit(1719880168.453:824): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.938445] audit: type=1006 audit(1719880168.453:825): pid=6095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 167.941675] audit: type=1300 audit(1719880168.453:825): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea67b940 a2=3 a3=1 items=0 ppid=1 pid=6095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.946622] audit: type=1327 audit(1719880168.453:825): proctitle=737368643A20636F7265205B707269765D [ 167.975409] audit: type=1105 audit(1719880168.494:826): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 167.982052] audit: type=1103 audit(1719880168.501:827): pid=6097 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.229344] audit: type=1106 audit(1719880168.748:828): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.238428] audit: type=1104 audit(1719880168.751:829): pid=6095 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.267246] kauditd_printk_skb: 1 callbacks suppressed [ 173.267251] audit: type=1130 audit(1719880173.786:831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.110:22-139.178.89.65:48950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.433932] audit: type=1101 audit(1719880173.953:832): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.440831] audit: type=1103 audit(1719880173.960:833): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.445552] audit: type=1006 audit(1719880173.960:834): pid=6112 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 173.448677] audit: type=1300 audit(1719880173.960:834): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff386ea70 a2=3 a3=1 items=0 ppid=1 pid=6112 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.453562] audit: type=1327 audit(1719880173.960:834): proctitle=737368643A20636F7265205B707269765D [ 173.478163] audit: type=1105 audit(1719880173.997:835): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.484412] audit: type=1103 audit(1719880174.004:836): pid=6114 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.729597] audit: type=1106 audit(1719880174.249:837): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.736128] audit: type=1104 audit(1719880174.250:838): pid=6112 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.766603] kauditd_printk_skb: 25 callbacks suppressed [ 178.766608] audit: type=1130 audit(1719880179.286:848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.110:22-139.178.89.65:39478 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.944897] audit: type=1101 audit(1719880179.464:849): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.951957] audit: type=1103 audit(1719880179.471:850): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.956694] audit: type=1006 audit(1719880179.472:851): pid=6168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 178.960378] audit: type=1300 audit(1719880179.472:851): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff88cf3a0 a2=3 a3=1 items=0 ppid=1 pid=6168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.966424] audit: type=1327 audit(1719880179.472:851): proctitle=737368643A20636F7265205B707269765D [ 178.992878] audit: type=1105 audit(1719880179.512:852): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 178.999350] audit: type=1103 audit(1719880179.519:853): pid=6170 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.288264] audit: type=1106 audit(1719880179.805:854): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 179.294225] audit: type=1104 audit(1719880179.805:855): pid=6168 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.323233] kauditd_printk_skb: 13 callbacks suppressed [ 184.323237] audit: type=1130 audit(1719880184.842:861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.110:22-139.178.89.65:39482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.492721] audit: type=1101 audit(1719880185.012:862): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.500007] audit: type=1103 audit(1719880185.019:863): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.504866] audit: type=1006 audit(1719880185.024:864): pid=6188 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 184.508113] audit: type=1300 audit(1719880185.024:864): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddb15a20 a2=3 a3=1 items=0 ppid=1 pid=6188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.513661] audit: type=1327 audit(1719880185.024:864): proctitle=737368643A20636F7265205B707269765D [ 184.541644] audit: type=1105 audit(1719880185.061:865): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.548349] audit: type=1103 audit(1719880185.067:866): pid=6190 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.788943] audit: type=1106 audit(1719880185.308:867): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 184.798961] audit: type=1104 audit(1719880185.309:868): pid=6188 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 189.834597] kauditd_printk_skb: 7 callbacks suppressed [ 189.834601] audit: type=1130 audit(1719880190.354:872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.110:22-139.178.89.65:47702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.006622] audit: type=1101 audit(1719880190.526:873): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.011192] audit: type=1103 audit(1719880190.527:874): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.015822] audit: type=1006 audit(1719880190.527:875): pid=6229 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 [ 190.018807] audit: type=1300 audit(1719880190.527:875): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc284d9b0 a2=3 a3=1 items=0 ppid=1 pid=6229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.023889] audit: type=1327 audit(1719880190.527:875): proctitle=737368643A20636F7265205B707269765D [ 190.055423] audit: type=1105 audit(1719880190.574:876): pid=6229 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.069289] audit: type=1103 audit(1719880190.582:877): pid=6231 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.317630] audit: type=1106 audit(1719880190.837:878): pid=6229 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 190.324324] audit: type=1104 audit(1719880190.838:879): pid=6229 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 203.483837] kauditd_printk_skb: 1 callbacks suppressed [ 203.483844] audit: type=1334 audit(1719880204.002:881): prog-id=116 op=UNLOAD [ 203.489825] audit: type=1334 audit(1719880204.009:882): prog-id=119 op=UNLOAD [ 204.241108] audit: type=1334 audit(1719880204.760:883): prog-id=202 op=LOAD [ 204.243885] audit: type=1334 audit(1719880204.763:884): prog-id=203 op=LOAD [ 204.245541] audit: type=1300 audit(1719880204.763:884): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001a98b0 a2=78 a3=0 items=0 ppid=3317 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.252405] audit: type=1327 audit(1719880204.763:884): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393665613263656334656433323338373263623730383832643064 [ 204.257731] audit: type=1334 audit(1719880204.763:885): prog-id=204 op=LOAD [ 204.259614] audit: type=1300 audit(1719880204.763:885): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001a9640 a2=78 a3=0 items=0 ppid=3317 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.265080] audit: type=1327 audit(1719880204.763:885): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862393665613263656334656433323338373263623730383832643064 [ 204.270347] audit: type=1334 audit(1719880204.765:886): prog-id=204 op=UNLOAD [ 208.649417] kauditd_printk_skb: 24 callbacks suppressed [ 208.649422] audit: type=1334 audit(1719880209.169:899): prog-id=76 op=UNLOAD [ 208.651855] audit: type=1334 audit(1719880209.169:900): prog-id=102 op=UNLOAD [ 209.268814] audit: type=1334 audit(1719880209.788:901): prog-id=210 op=LOAD [ 209.272122] audit: type=1334 audit(1719880209.791:902): prog-id=211 op=LOAD [ 209.273374] audit: type=1300 audit(1719880209.791:902): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001338b0 a2=78 a3=0 items=0 ppid=2673 pid=6454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.278790] audit: type=1327 audit(1719880209.791:902): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313932633062343935343331616533356265656631383037633665 [ 209.284728] audit: type=1334 audit(1719880209.791:903): prog-id=212 op=LOAD [ 209.286705] audit: type=1300 audit(1719880209.791:903): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000133640 a2=78 a3=0 items=0 ppid=2673 pid=6454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.291796] audit: type=1327 audit(1719880209.791:903): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364313932633062343935343331616533356265656631383037633665 [ 209.296674] audit: type=1334 audit(1719880209.791:904): prog-id=212 op=UNLOAD Stopping session-1.scope - Session 1 of User core... Stopping cri-containerd-70…2e449dcbf9bcba08be248892ea6720b... Stopping cri-containerd-cc…89bd0988d4a569a87816a95d9f6a780... Stopping cri-containerd-0c…cdd8ad0ad0604cbd10ec7afff8549a6... Stopping cri-containerd-15…b2a585cbb0b73fdc1bfaba0fe927ae5... Stopping cri-containerd-21…08dbaa5ec02e5b030cec28ed2be06a9... Stopping cri-containerd-43…3f2280a9398e7f44604755f77993f7e... Stopping cri-containerd-47…3baef279412ddd81c714fd0a401f089... Stopping cri-containerd-49…cc10943b8c7f0c48463bba46609c2a4... Stopping cri-containerd-66…7a58b03b241770ed7d17c155265704a... Stopping cri-containerd-8b…1e8f36882e17f97ce986d8d513c8d49... [ 225.613171] kauditd_printk_skb: 4 callbacks suppressed [ 225.613177] audit: type=1106 audit(1719880226.131:907): pid=2029 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 225.619789] audit: type=1104 audit(1719880226.131:908): pid=2029 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Stopping cri-containerd-b6…05868a11a1540239d63645a1503c3e9... Stopping cri-containerd-b9…ff713253df46aa1bae32cce6da3d617... Stopping cri-containerd-b9…210aa8fbf0a2e4d365650c10523a86a... Stopping cri-containerd-c6…b871ea44667886b653a0c0669be1a1c... Stopping cri-containerd-ce…82732da4b1e92023d700298a5dff872... Stopping cri-containerd-d6…76e0cb23982c2a1a79e554e76123ae8... Stopping cri-containerd-da…a88aaa4d696267af3558d6656b95f86... Stopping cri-containerd-e7…427873d865d2b10892968d654674190... Stopping cri-containerd-f3…3bdc6242b3d4942d0d7d109f8c520c9... [ OK ] Removed slice system-addon… - Slice /system/addon-config. [ OK ] Removed slice system-addon…ice - Slice /system/addon-run. [ OK ] Removed slice system-modpr…lice - Slice /system/modprobe. [ OK ] Removed slice system-syste… - Slice /system/system-cloudinit. [ OK ] Stopped target multi-user.target - Multi-User System. [ OK ] Stopped target getty.target - Login Prompts. [ OK ] Stopped target machines.target - Containers. [ OK ] Stopped target nss-lookup.…m - Host and Network Name Lookups. [ OK ] Stopped target remote-cryp…et - Remote Encrypted Volumes. [ OK ] Stopped target timers.target - Timer Units. [ OK ] Stopped logrotate.timer - Daily rotation of log files. [ OK ] Stopped mdadm.timer - …D array's redundancy information.. [ OK ] Stopped systemd-tmpfiles-c… Cleanup of Temporary Directories. [ OK ] Stopped target time-set.target - System Time Set. [ OK ] Stopped target user-config… Load user-provided cloud configs. [ OK ] Stopped target system-conf…oad system-provided cloud configs. Unmounting boot.mount - Boot partition... Stopping amazon-ssm-agent.service - amazon-ssm-agent... [ OK ] Stopped coreos-metadata-ss…Flatcar Metadata Agent (SSH Keys). [ 225.713662] audit: type=1131 audit(1719880226.233:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Removed slice system-coreo…e /system/coreos-metadata-sshkeys. [ OK ] Stopped coreos-metadata.service - Flatcar Metadata Agent. [ 225.722471] audit: type=1131 audit(1719880226.242:910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping docker.service[0…er Application Container Engine... [ OK ] Stopped ensure-sysext.service. [ 225.730161] audit: type=1131 audit(1719880226.249:911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping getty@tty1.service - Getty on tty1... Stopping kubelet.service[…elet: The Kubernetes Node Agent... [ OK ] Stopped nvidia.service - NVIDIA Configure Service. [ 225.740180] audit: type=1131 audit(1719880226.259:912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping polkit.service - Authorization Manager... [ OK ] Stopped prepare-helm.service - Unpack helm to /opt/bin. [ 225.749608] audit: type=1131 audit(1719880226.269:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping serial-getty@ttyS…ice - Serial Getty on ttyS0... Stopping sshd@0-172.31.29.…SH per-connection server daemon... [ OK ] Stopped sshkeys.service. [ 225.761344] audit: type=1131 audit(1719880226.281:914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshkeys comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped systemd-machine-id…it a transient machine-id on disk. [ 225.767094] audit: type=1131 audit(1719880226.286:915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ OK ] Stopped target first-boot-….target - First Boot Complete. Stopping systemd-random-se…ice - Load/Save Random Seed... [ OK ] Stopped update-ssh-keys-af…date-ssh-keys once after Ignition. [ 225.781676] audit: type=1131 audit(1719880226.301:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=update-ssh-keys-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Stopping locksmithd.service - Cluster reboot manager... [ OK ] Stopped polkit.service - Authorization Manager. [ OK ] Stopped sshd@0-172.31.29.1…nSSH per-connection server daemon. [ OK ] Stopped getty@tty1.service - Getty on tty1. [ OK ] Stopped serial-getty@ttyS0…rvice - Serial Getty on ttyS0. [ OK ] Stopped kubelet.service[0…ubelet: The Kubernetes Node Agent. [ OK ] Unmounted boot.mount - Boot partition. [ OK ] Stopped systemd-random-see…rvice - Load/Save Random Seed. [ OK ] Stopped cri-containerd-da3…8ba88aaa4d696267af3558d6656b95f86. [ OK ] Stopped cri-containerd-b95…8a210aa8fbf0a2e4d365650c10523a86a. [ OK ] Stopped cri-containerd-d6d…d376e0cb23982c2a1a79e554e76123ae8. [ OK ] Stopped cri-containerd-ce4…8982732da4b1e92023d700298a5dff872. [ OK ] Stopped cri-containerd-f3c…293bdc6242b3d4942d0d7d109f8c520c9. [ OK ] Stopped cri-containerd-438…f33f2280a9398e7f44604755f77993f7e. [ OK ] Stopped cri-containerd-47b…e23baef279412ddd81c714fd0a401f089. [ OK ] Stopped cri-containerd-66d…e17a58b03b241770ed7d17c155265704a. [ OK ] Stopped cri-containerd-491…48cc10943b8c7f0c48463bba46609c2a4. [ OK ] Stopped docker.service…cker Application Container Engine. [ OK ] Stopped cri-containerd-159…6fb2a585cbb0b73fdc1bfaba0fe927ae5. [ OK ] Stopped cri-containerd-0c9…0ccdd8ad0ad0604cbd10ec7afff8549a6. [ OK ] Stopped locksmithd.service - Cluster reboot manager. [ OK ] Stopped cri-containerd-b65…a305868a11a1540239d63645a1503c3e9. [ OK ] Stopped cri-containerd-c6e…4cb871ea44667886b653a0c0669be1a1c. [ OK ] Stopped cri-containerd-b92…16ff713253df46aa1bae32cce6da3d617. [ OK ] Stopped cri-containerd-21a…4708dbaa5ec02e5b030cec28ed2be06a9. [ OK ] Stopped session-1.scope - Session 1 of User core. [ OK ] Removed slice system-getty.slice - Slice /system/getty. [ OK ] Removed slice system-seria… - Slice /system/serial-getty. [ OK ] Removed slice system-sshd.slice - Slice /system/sshd. [ OK ] Removed slice kubepods-bes…4c93_4a23_b529_e6265885cf25.slice. [ OK ] Removed slice kubepods-bes…1a04_42ab_83b2_fa4c31de28be.slice. [ OK ] Removed slice kubepods-bes…957c_4561_b824_2c519e3e055a.slice. [ OK ] Removed slice kubepods-bes…7b1a_4403_9080_34eb2e91dd00.slice. [ OK ] Removed slice kubepods-bes…fc92_4cc4_82f2_d25decde95f5.slice. Stopping containerd.servic… - containerd container runtime... [ OK ] Stopped sshd-keygen.service - Generate sshd host keys. [ OK ] Stopped systemd-fsck@dev-d… on /dev/disk/by-label/EFI-SYSTEM. Stopping systemd-logind.se…ice - User Login Management... Stopping update-engine.service - Update Engine... Stopping user@500.service - User Manager for UID 500... [ OK ] Stopped systemd-logind.service - User Login Management. [ OK ] Stopped user@500.service - User Manager for UID 500. Stopping systemd-user-sess…vice - Permit User Sessions... Stopping user-runtime-dir@…Runtime Directory /run/user/500... [ OK ] Stopped update-engine.service - Update Engine. [ OK ] Unmounted run-user-500.mount - /run/user/500. [ OK ] Stopped user-runtime-dir@5…r Runtime Directory /run/user/500. [ OK ] Removed slice user-500.slice - User Slice of UID 500. Stopping dbus.service - D-Bus System Message Bus... [ OK ] Stopped dbus.service - D-Bus System Message Bus. [ OK ] Stopped containerd.service…0m - containerd container runtime. [ OK ] Stopped systemd-user-sessi…ervice - Permit User Sessions. [ OK ] Stopped target remote-fs.target - Remote File Systems. [ **] (3 of 5) Job cri-containerd-e7597aa…scope/stop running (2s / 1min 30s) M [ ***] (4 of 5) Job cri-containerd-8b96ea2…scope/stop running (3s / 1min 30s) M [ *** ] (4 of 5) Job cri-containerd-8b96ea2…scope/stop running (3s / 1min 30s) M [ *** ] (4 of 5) Job cri-containerd-8b96ea2…scope/stop running (4s / 1min 30s) M [*** ] (5 of 5) Job amazon-ssm-agent.service/stop running (4s / 1min 30s) M [ OK ] Stopped cri-containerd-cca…3989bd0988d4a569a87816a95d9f6a780. [ OK ] Removed slice kubepods-bur…ddac_40bb_a7c7_74a7ed8133f5.slice. [ OK ] Stopped cri-containerd-708…762e449dcbf9bcba08be248892ea6720b. [ OK ] Removed slice kubepods-bur…cb6d_43ca_9fe5_fbfc20985b6f.slice. [ OK ] Stopped cri-containerd-e75…04427873d865d2b10892968d654674190. [ OK ] Removed slice kubepods-bes…aab0_45dd_a78f_d95223218e55.slice. [ 230.620242] kauditd_printk_skb: 48 callbacks suppressed [ 230.620247] audit: type=1334 audit(1719880231.139:965): prog-id=142 op=UNLOAD [ OK ] Stopped cri-containerd-8b9…9a1e8f36882e17f97ce986d8d513c8d49. [ 230.758204] audit: type=1334 audit(1719880231.274:966): prog-id=202 op=UNLOAD [ 230.760590] audit: type=1334 audit(1719880231.279:967): prog-id=205 op=UNLOAD [ OK ] Removed slice kubepods-bes…9a89_4b2e_a0c0_c20f5aa27f38.slice.