Starting setup-oem.service - Setup OEM... Starting ssh-key-proc-cmdl…l an ssh key from /proc/cmdline... Starting sshd-keygen.service - Generate sshd host keys... Starting systemd-logind.se…ice - User Login Management... Starting update-engine.service - Update Engine... Starting update-ssh-keys-a…te-ssh-keys once after Ignition... [ OK ] Started dbus.service - D-Bus System Message Bus. [ OK ] Finished ssh-key-proc-cmdl…all an ssh key from /proc/cmdline. [ OK ] Reached target system-conf…oad system-provided cloud configs. [ OK ] Reached target user-config… Load user-provided cloud configs. Starting systemd-hostnamed.service - Hostname Service... [ OK ] Finished setup-oem.service - Setup OEM. [ OK ] Started amazon-ssm-agent.service - amazon-ssm-agent. [ OK ] Finished nvidia.service - NVIDIA Configure Service. [ 16.262969] extend-filesystems[1897]: Found loop4 [ 16.265433] extend-filesystems[1897]: Found loop5 [ 16.266766] extend-filesystems[1897]: Found loop6 [ 16.268044] extend-filesystems[1897]: Found loop7 [ 16.269270] extend-filesystems[1897]: Found nvme0n1 [ 16.270544] extend-filesystems[1897]: Found nvme0n1p1 [ 16.271861] extend-filesystems[1897]: Found nvme0n1p2 [ OK ] Finished motdgen.service - Generate /run/flatcar/motd. [ 16.292206] extend-filesystems[1897]: Found nvme0n1p3 [ 16.294164] extend-filesystems[1897]: Found usr [ 16.295721] extend-filesystems[1897]: Found nvme0n1p4 [ 16.297160] extend-filesystems[1897]: Found nvme0n1p6 [ 16.298491] extend-filesystems[1897]: Found nvme0n1p7 [ 16.300127] extend-filesystems[1897]: Found nvme0n1p9 [ 16.301908] extend-filesystems[1897]: Checking size of /dev/nvme0n1p9 [ OK ] Started systemd-logind.service - User Login Management. [ OK ] Started update-engine.service - Update Engine. [ 16.347622] extend-filesystems[1897]: Resized partition /dev/nvme0n1p9 [ 16.433564] EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks [ OK ] Started locksmithd.service - Cluster reboot manager. [ 16.394799] extend-filesystems[1965]: resize2fs 1.47.0 (5-Feb-2023) [ 16.508629] EXT4-fs (nvme0n1p9): resized filesystem to 1489915 [ OK ] Finished update-ssh-keys-a…date-ssh-keys once after Ignition. Starting sshkeys.service... [ OK ] Finished extend-filesystems.service - Extend Filesystems. [ 16.550912] extend-filesystems[1965]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required [ 16.553881] extend-filesystems[1965]: old_desc_blocks = 1, new_desc_blocks = 1 [ 16.555772] extend-filesystems[1965]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. [ 16.571268] extend-filesystems[1897]: Resized filesystem in /dev/nvme0n1p9 [ OK ] Created slice system-coreo…e /system/coreos-metadata-sshkeys. Starting coreos-metadata-s…atcar Metadata Agent (SSH Keys)... [ OK ] Started systemd-hostnamed.service - Hostname Service. Starting polkit.service - Authorization Manager... [ OK ] Started polkit.service - Authorization Manager. [ 17.093069] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (1986) [ OK ] Finished coreos-metadata.s…vice - Flatcar Metadata Agent. [ OK ] Finished coreos-metadata-s…Flatcar Metadata Agent (SSH Keys). [ OK ] Finished sshkeys.service. [ OK ] Started containerd.service…0m - containerd container runtime. [ OK ] Finished prepare-helm.service - Unpack helm to /opt/bin. [ OK ] Started kubelet.service[0…ubelet: The Kubernetes Node Agent. 2024/07/02 00:25:57Z: Amazon SSM Agent v3.2.0.0 is running 2024/07/02 00:25:57Z: OsProductName: Flatcar Container Linux by Kinvolk 2024/07/02 00:25:57Z: OsVersion: 3815.2.5 [* ] Job sshd-keygen.service/start running (5s / no limit) M [ OK ] Finished sshd-keygen.service - Generate sshd host keys.  Starting issuegen.service - Generate /run/issue... [ OK ] Finished issuegen.service - Generate /run/issue. Starting systemd-user-sess…vice - Permit User Sessions... [ OK ] Finished systemd-user-sess…ervice - Permit User Sessions. [ OK ] Started getty@tty1.service - Getty on tty1. [ OK ] Started serial-getty@ttyS0…rvice - Serial Getty on ttyS0. [ OK ] Reached target getty.target - Login Prompts. [ OK ] Reached target multi-user.target - Multi-User System. Starting systemd-update-ut… Record Runlevel Change in UTMP... [ OK ] Finished systemd-update-ut… - Record Runlevel Change in UTMP. This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:25:58 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 26.605528] kauditd_printk_skb: 57 callbacks suppressed [ 26.605532] audit: type=1305 audit(1719879963.273:153): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 26.608891] audit: type=1300 audit(1719879963.273:153): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe950def0 a2=420 a3=0 items=0 ppid=1 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 26.615662] audit: type=1327 audit(1719879963.273:153): proctitle=2F7362696E2F617564697463746C002D44 [ 26.617362] audit: type=1131 audit(1719879963.276:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.665327] audit: type=1130 audit(1719879963.331:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 26.672600] audit: type=1106 audit(1719879963.338:156): pid=2222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 26.677317] audit: type=1104 audit(1719879963.338:157): pid=2222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 26.696821] audit: type=1106 audit(1719879963.364:158): pid=2218 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 26.702741] audit: type=1104 audit(1719879963.364:159): pid=2218 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 26.708079] audit: type=1131 audit(1719879963.370:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.24.191:22-139.178.89.65:46416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 28.500071] Initializing XFRM netlink socket This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:26:06 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 40.655614] kauditd_printk_skb: 88 callbacks suppressed [ 40.655619] audit: type=1130 audit(1719879977.361:199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 40.660163] audit: type=1131 audit(1719879977.361:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.233142] audit: type=1130 audit(1719879978.939:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.346440] audit: type=1131 audit(1719879979.052:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 46.953227] audit: type=1131 audit(1719879983.661:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.594325] audit: type=1130 audit(1719879989.304:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.598583] audit: type=1131 audit(1719879989.304:205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 52.967981] audit: type=1130 audit(1719879989.678:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.082770] audit: type=1131 audit(1719879989.793:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 53.591554] audit: type=1130 audit(1719879990.301:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.595842] audit: type=1131 audit(1719879990.301:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.308569] audit: type=1130 audit(1719879991.020:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 54.670194] audit: type=1130 audit(1719879991.381:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 55.684386] audit: type=1325 audit(1719879992.395:212): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 55.686973] audit: type=1300 audit(1719879992.395:212): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffcbcdbb0 a2=0 a3=1 items=0 ppid=2753 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 62.115219] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (3039) [ 62.841942] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (3038) [ 63.626069] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (3038) [ 67.015360] kauditd_printk_skb: 34 callbacks suppressed [ 67.015364] audit: type=1131 audit(1719880003.728:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 67.372810] audit: type=1130 audit(1719880004.085:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 74.985647] audit: type=1106 audit(1719880011.699:226): pid=2255 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 74.990163] audit: type=1104 audit(1719880011.700:227): pid=2255 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 75.016068] audit: type=1106 audit(1719880011.729:228): pid=2251 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 75.022692] audit: type=1104 audit(1719880011.729:229): pid=2251 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 75.028066] audit: type=1131 audit(1719880011.736:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.191:22-139.178.89.65:46432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 80.645549] audit: type=1325 audit(1719880017.360:231): table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3558 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 80.652200] audit: type=1300 audit(1719880017.360:231): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe01f5c80 a2=0 a3=1 items=0 ppid=3519 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.658380] audit: type=1325 audit(1719880017.364:232): table=mangle:39 family=2 entries=1 op=nft_register_chain pid=3559 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 80.661130] audit: type=1300 audit(1719880017.364:232): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffb849140 a2=0 a3=1 items=0 ppid=3519 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.668392] audit: type=1327 audit(1719880017.364:232): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 80.671112] audit: type=1325 audit(1719880017.366:233): table=nat:40 family=2 entries=1 op=nft_register_chain pid=3560 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 80.673827] audit: type=1300 audit(1719880017.366:233): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0b54590 a2=0 a3=1 items=0 ppid=3519 pid=3560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 80.679781] audit: type=1327 audit(1719880017.366:233): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 80.682868] audit: type=1327 audit(1719880017.360:231): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 80.687004] audit: type=1325 audit(1719880017.376:234): table=filter:41 family=2 entries=1 op=nft_register_chain pid=3561 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 89.174878] kauditd_printk_skb: 143 callbacks suppressed [ 89.174883] audit: type=1325 audit(1719880025.890:282): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3749 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.178543] audit: type=1300 audit(1719880025.890:282): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffc70a9350 a2=0 a3=1 items=0 ppid=3519 pid=3749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.184965] audit: type=1327 audit(1719880025.890:282): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 89.188047] audit: type=1325 audit(1719880025.892:283): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3749 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.191391] audit: type=1300 audit(1719880025.892:283): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc70a9350 a2=0 a3=1 items=0 ppid=3519 pid=3749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.197405] audit: type=1327 audit(1719880025.892:283): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 89.200363] audit: type=1325 audit(1719880025.913:284): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 89.203455] audit: type=1300 audit(1719880025.913:284): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff0978df0 a2=0 a3=1 items=0 ppid=3519 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.209219] audit: type=1327 audit(1719880025.913:284): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 89.212194] audit: type=1325 audit(1719880025.913:285): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.495929] kauditd_printk_skb: 8 callbacks suppressed [ 98.495934] audit: type=1325 audit(1719880035.211:288): table=filter:95 family=2 entries=15 op=nft_register_rule pid=4012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.499616] audit: type=1300 audit(1719880035.211:288): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffe79adb20 a2=0 a3=1 items=0 ppid=3519 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.507047] audit: type=1327 audit(1719880035.211:288): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 98.510073] audit: type=1325 audit(1719880035.215:289): table=nat:96 family=2 entries=19 op=nft_register_chain pid=4012 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 98.512831] audit: type=1300 audit(1719880035.215:289): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe79adb20 a2=0 a3=1 items=0 ppid=3519 pid=4012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.518346] audit: type=1327 audit(1719880035.215:289): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 108.621684] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 108.623033] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 110.291828] audit: type=1400 audit(1719880047.008:290): avc: denied { write } for pid=4414 comm="tee" name="fd" dev="proc" ino=22431 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 110.295385] audit: type=1300 audit(1719880047.008:290): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec422a1e a2=241 a3=1b6 items=1 ppid=4363 pid=4414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.300783] audit: type=1307 audit(1719880047.008:290): cwd="/etc/service/enabled/cni/log" [ 110.302300] audit: type=1302 audit(1719880047.008:290): item=0 name="/dev/fd/63" inode=22427 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 110.306158] audit: type=1327 audit(1719880047.008:290): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 [ 110.316660] audit: type=1400 audit(1719880047.032:291): avc: denied { write } for pid=4406 comm="tee" name="fd" dev="proc" ino=22438 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 [ 110.320694] audit: type=1300 audit(1719880047.032:291): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc65aea1d a2=241 a3=1b6 items=1 ppid=4369 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.326252] audit: type=1307 audit(1719880047.032:291): cwd="/etc/service/enabled/bird/log" [ 110.327795] audit: type=1302 audit(1719880047.032:291): item=0 name="/dev/fd/63" inode=22420 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 [ 110.331780] audit: type=1327 audit(1719880047.032:291): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:27:28 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:27:30 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 114.190284] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 114.191490] IPv6: ADDRCONF(NETDEV_CHANGE): calife4a73530be: link becomes ready [ 115.181259] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 115.182651] IPv6: ADDRCONF(NETDEV_CHANGE): cali9ce8922afdd: link becomes ready [ 116.180706] kauditd_printk_skb: 65 callbacks suppressed [ 116.180711] audit: type=1325 audit(1719880052.897:313): table=filter:105 family=2 entries=14 op=nft_register_rule pid=4902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.184604] audit: type=1300 audit(1719880052.897:313): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=fffff018cf70 a2=0 a3=1 items=0 ppid=3519 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.191271] audit: type=1327 audit(1719880052.897:313): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.196349] audit: type=1325 audit(1719880052.898:314): table=nat:106 family=2 entries=14 op=nft_register_rule pid=4902 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.204212] audit: type=1300 audit(1719880052.898:314): arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=fffff018cf70 a2=0 a3=1 items=0 ppid=3519 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.216703] audit: type=1327 audit(1719880052.898:314): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.237669] audit: type=1325 audit(1719880052.954:315): table=filter:107 family=2 entries=11 op=nft_register_rule pid=4905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.240639] audit: type=1300 audit(1719880052.954:315): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffca8fd1c0 a2=0 a3=1 items=0 ppid=3519 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.248322] audit: type=1327 audit(1719880052.954:315): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 116.258599] audit: type=1325 audit(1719880052.975:316): table=nat:108 family=2 entries=47 op=nft_register_chain pid=4905 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:27:33 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 116.480678] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 116.481909] IPv6: ADDRCONF(NETDEV_CHANGE): cali525d6c53df4: link becomes ready [ 116.567866] IPv6: ADDRCONF(NETDEV_CHANGE): cali60100b9b19a: link becomes ready This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:27:34 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:27:35 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 124.070925] kauditd_printk_skb: 19 callbacks suppressed [ 124.070930] audit: type=1130 audit(1719880060.785:328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.24.191:22-139.178.89.65:37244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 124.267006] audit: type=1101 audit(1719880060.983:329): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.273389] audit: type=1103 audit(1719880060.983:330): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.278604] audit: type=1006 audit(1719880060.983:331): pid=5257 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 124.282009] audit: type=1300 audit(1719880060.983:331): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe791d3c0 a2=3 a3=1 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.289413] audit: type=1327 audit(1719880060.983:331): proctitle=737368643A20636F7265205B707269765D [ 124.326374] audit: type=1105 audit(1719880061.042:332): pid=5257 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.332810] audit: type=1103 audit(1719880061.045:333): pid=5260 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.642948] audit: type=1106 audit(1719880061.358:334): pid=5257 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.653959] audit: type=1104 audit(1719880061.359:335): pid=5257 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.671596] kauditd_printk_skb: 1 callbacks suppressed [ 129.671601] audit: type=1130 audit(1719880066.387:337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.24.191:22-139.178.89.65:37252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 129.847073] audit: type=1101 audit(1719880066.563:338): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.854051] audit: type=1103 audit(1719880066.570:339): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.858704] audit: type=1006 audit(1719880066.570:340): pid=5481 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 129.862025] audit: type=1300 audit(1719880066.570:340): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4dd6870 a2=3 a3=1 items=0 ppid=1 pid=5481 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.867415] audit: type=1327 audit(1719880066.570:340): proctitle=737368643A20636F7265205B707269765D [ 129.887239] audit: type=1105 audit(1719880066.603:341): pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 129.893958] audit: type=1103 audit(1719880066.609:342): pid=5484 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.146722] audit: type=1106 audit(1719880066.862:343): pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 130.153209] audit: type=1104 audit(1719880066.864:344): pid=5481 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.510616] kauditd_printk_skb: 23 callbacks suppressed [ 136.510622] audit: type=1130 audit(1719880073.225:364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.24.191:22-139.178.89.65:49094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.677606] audit: type=1101 audit(1719880073.393:365): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.682181] audit: type=1103 audit(1719880073.395:366): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.686868] audit: type=1006 audit(1719880073.395:367): pid=5555 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 136.689730] audit: type=1300 audit(1719880073.395:367): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0ecfed0 a2=3 a3=1 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.695045] audit: type=1327 audit(1719880073.395:367): proctitle=737368643A20636F7265205B707269765D [ 136.716727] audit: type=1105 audit(1719880073.432:368): pid=5555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.724245] audit: type=1103 audit(1719880073.440:369): pid=5558 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.971328] audit: type=1106 audit(1719880073.686:370): pid=5555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.987501] audit: type=1104 audit(1719880073.686:371): pid=5555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.995149] kauditd_printk_skb: 1 callbacks suppressed [ 141.995154] audit: type=1130 audit(1719880078.711:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.24.191:22-139.178.89.65:44846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 142.167099] audit: type=1101 audit(1719880078.883:374): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.171935] audit: type=1103 audit(1719880078.883:375): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.177304] audit: type=1006 audit(1719880078.883:376): pid=5578 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 142.180700] audit: type=1300 audit(1719880078.883:376): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc23a7e80 a2=3 a3=1 items=0 ppid=1 pid=5578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.186441] audit: type=1327 audit(1719880078.883:376): proctitle=737368643A20636F7265205B707269765D [ 142.208996] audit: type=1105 audit(1719880078.924:377): pid=5578 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.214105] audit: type=1103 audit(1719880078.925:378): pid=5581 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.458655] audit: type=1106 audit(1719880079.174:379): pid=5578 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 142.465218] audit: type=1104 audit(1719880079.180:380): pid=5578 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.486194] kauditd_printk_skb: 1 callbacks suppressed [ 147.486198] audit: type=1130 audit(1719880084.202:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.191:22-139.178.89.65:44856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.657178] audit: type=1101 audit(1719880084.373:383): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.664518] audit: type=1103 audit(1719880084.380:384): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.669182] audit: type=1006 audit(1719880084.380:385): pid=5592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 147.672457] audit: type=1300 audit(1719880084.380:385): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3349010 a2=3 a3=1 items=0 ppid=1 pid=5592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.677673] audit: type=1327 audit(1719880084.380:385): proctitle=737368643A20636F7265205B707269765D [ 147.708123] audit: type=1105 audit(1719880084.423:386): pid=5592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.714534] audit: type=1103 audit(1719880084.430:387): pid=5595 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.981584] audit: type=1106 audit(1719880084.697:388): pid=5592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.986961] audit: type=1104 audit(1719880084.698:389): pid=5592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.821022] kauditd_printk_skb: 1 callbacks suppressed [ 152.821027] audit: type=1325 audit(1719880089.536:391): table=filter:111 family=2 entries=9 op=nft_register_rule pid=5638 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.828496] audit: type=1300 audit(1719880089.536:391): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=fffff5018f90 a2=0 a3=1 items=0 ppid=3519 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.833998] audit: type=1327 audit(1719880089.536:391): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 152.839948] audit: type=1325 audit(1719880089.551:392): table=nat:112 family=2 entries=20 op=nft_register_rule pid=5638 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.842924] audit: type=1300 audit(1719880089.551:392): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff5018f90 a2=0 a3=1 items=0 ppid=3519 pid=5638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.854426] audit: type=1327 audit(1719880089.551:392): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 152.931489] audit: type=1325 audit(1719880089.647:393): table=filter:113 family=2 entries=10 op=nft_register_rule pid=5640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.935579] audit: type=1300 audit(1719880089.647:393): arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffeb328340 a2=0 a3=1 items=0 ppid=3519 pid=5640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.942269] audit: type=1327 audit(1719880089.647:393): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 152.946764] audit: type=1325 audit(1719880089.660:394): table=nat:114 family=2 entries=20 op=nft_register_rule pid=5640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.011158] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 154.012428] IPv6: ADDRCONF(NETDEV_CHANGE): calid3a69939161: link becomes ready This is ip-172-31-24-191 (Linux aarch64 6.1.96-flatcar) 00:28:13 SSH host key: SHA256:66cUSYb0G8W1tOItFJI/bvV7/G/p7j0szpDvKt0vL5Y (ECDSA) SSH host key: SHA256:tsJyj5KIfvzRDi7C/uAROhW3i0Mh155PAEFxhZo076Q (RSA) SSH host key: SHA256:ERm4DOgqCjnsqpCzv5zNf11MRsSmUcjM7QMoGxOGNyg (ED25519) eth0: 172.31.24.191 fe80::434:ecff:fe33:6f07 ip-172-31-24-191 login: [ 158.397829] kauditd_printk_skb: 58 callbacks suppressed [ 158.397834] audit: type=1325 audit(1719880095.113:433): table=filter:120 family=2 entries=34 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.401571] audit: type=1300 audit(1719880095.113:433): arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=ffffc13859b0 a2=0 a3=1 items=0 ppid=3519 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.408508] audit: type=1327 audit(1719880095.113:433): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 158.442220] audit: type=1325 audit(1719880095.116:434): table=nat:121 family=2 entries=20 op=nft_register_rule pid=5775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 158.445022] audit: type=1300 audit(1719880095.116:434): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc13859b0 a2=0 a3=1 items=0 ppid=3519 pid=5775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.453590] audit: type=1327 audit(1719880095.116:434): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 158.468542] audit: type=1106 audit(1719880095.184:435): pid=5762 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.485795] audit: type=1104 audit(1719880095.185:436): pid=5762 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.501977] audit: type=1131 audit(1719880095.192:437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.24.191:22-139.178.89.65:36068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.514121] audit: type=1130 audit(1719880095.217:438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.24.191:22-139.178.89.65:36082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.194564] kauditd_printk_skb: 22 callbacks suppressed [ 164.194569] audit: type=1130 audit(1719880100.910:451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.24.191:22-139.178.89.65:57470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.369039] audit: type=1101 audit(1719880101.086:452): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.373788] audit: type=1103 audit(1719880101.089:453): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.378826] audit: type=1006 audit(1719880101.089:454): pid=5867 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 164.382092] audit: type=1300 audit(1719880101.089:454): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9e274e0 a2=3 a3=1 items=0 ppid=1 pid=5867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.387289] audit: type=1327 audit(1719880101.089:454): proctitle=737368643A20636F7265205B707269765D [ 164.414400] audit: type=1105 audit(1719880101.131:455): pid=5867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.421361] audit: type=1103 audit(1719880101.131:456): pid=5872 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.660878] audit: type=1106 audit(1719880101.378:457): pid=5867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 164.675949] audit: type=1104 audit(1719880101.379:458): pid=5867 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.692139] kauditd_printk_skb: 7 callbacks suppressed [ 169.692144] audit: type=1130 audit(1719880106.409:462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.24.191:22-139.178.89.65:57472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.886817] audit: type=1101 audit(1719880106.604:463): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.893827] audit: type=1103 audit(1719880106.611:464): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.898244] audit: type=1006 audit(1719880106.611:465): pid=5906 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 169.901336] audit: type=1300 audit(1719880106.611:465): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8547160 a2=3 a3=1 items=0 ppid=1 pid=5906 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.906596] audit: type=1327 audit(1719880106.611:465): proctitle=737368643A20636F7265205B707269765D [ 169.933593] audit: type=1105 audit(1719880106.650:466): pid=5906 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.939585] audit: type=1103 audit(1719880106.656:467): pid=5909 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.184431] audit: type=1106 audit(1719880106.901:468): pid=5906 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 170.190759] audit: type=1104 audit(1719880106.904:469): pid=5906 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.210472] kauditd_printk_skb: 1 callbacks suppressed [ 175.210477] audit: type=1130 audit(1719880111.927:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.24.191:22-139.178.89.65:43790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.380316] audit: type=1101 audit(1719880112.096:472): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.387200] audit: type=1103 audit(1719880112.103:473): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.392027] audit: type=1006 audit(1719880112.104:474): pid=5928 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 175.394758] audit: type=1300 audit(1719880112.104:474): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8e63ce0 a2=3 a3=1 items=0 ppid=1 pid=5928 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.399795] audit: type=1327 audit(1719880112.104:474): proctitle=737368643A20636F7265205B707269765D [ 175.424279] audit: type=1105 audit(1719880112.140:475): pid=5928 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.430938] audit: type=1103 audit(1719880112.147:476): pid=5931 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.676108] audit: type=1106 audit(1719880112.392:477): pid=5928 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 175.682851] audit: type=1104 audit(1719880112.393:478): pid=5928 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.706211] kauditd_printk_skb: 1 callbacks suppressed [ 180.706216] audit: type=1130 audit(1719880117.422:480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.191:22-139.178.89.65:43792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.877977] audit: type=1101 audit(1719880117.594:481): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.884792] audit: type=1103 audit(1719880117.601:482): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.889446] audit: type=1006 audit(1719880117.601:483): pid=5964 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 180.892694] audit: type=1300 audit(1719880117.601:483): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf35d680 a2=3 a3=1 items=0 ppid=1 pid=5964 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.897510] audit: type=1327 audit(1719880117.601:483): proctitle=737368643A20636F7265205B707269765D [ 180.921178] audit: type=1105 audit(1719880117.637:484): pid=5964 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.927928] audit: type=1103 audit(1719880117.637:485): pid=5967 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.213418] audit: type=1106 audit(1719880117.929:486): pid=5964 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 181.227187] audit: type=1104 audit(1719880117.929:487): pid=5964 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.247225] kauditd_printk_skb: 1 callbacks suppressed [ 186.247229] audit: type=1130 audit(1719880122.964:489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.191:22-139.178.89.65:40762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.420190] audit: type=1101 audit(1719880123.137:490): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.426881] audit: type=1103 audit(1719880123.143:491): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.431264] audit: type=1006 audit(1719880123.144:492): pid=5983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 186.434203] audit: type=1300 audit(1719880123.144:492): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe82d2ff0 a2=3 a3=1 items=0 ppid=1 pid=5983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.439414] audit: type=1327 audit(1719880123.144:492): proctitle=737368643A20636F7265205B707269765D [ 186.464213] audit: type=1105 audit(1719880123.180:493): pid=5983 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.469837] audit: type=1103 audit(1719880123.186:494): pid=5986 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.707720] audit: type=1106 audit(1719880123.424:495): pid=5983 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 186.714517] audit: type=1104 audit(1719880123.426:496): pid=5983 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.736045] kauditd_printk_skb: 1 callbacks suppressed [ 191.736050] audit: type=1130 audit(1719880128.453:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.24.191:22-139.178.89.65:59810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.908552] audit: type=1101 audit(1719880128.625:499): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.915627] audit: type=1103 audit(1719880128.632:500): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.920600] audit: type=1006 audit(1719880128.633:501): pid=6024 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 191.924024] audit: type=1300 audit(1719880128.633:501): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd965ac00 a2=3 a3=1 items=0 ppid=1 pid=6024 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.928916] audit: type=1327 audit(1719880128.633:501): proctitle=737368643A20636F7265205B707269765D [ 191.953243] audit: type=1105 audit(1719880128.670:502): pid=6024 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.959590] audit: type=1103 audit(1719880128.676:503): pid=6027 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.203178] audit: type=1106 audit(1719880128.920:504): pid=6024 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 192.208536] audit: type=1104 audit(1719880128.925:505): pid=6024 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success'