t(1719880099.616:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.273008] audit: type=1131 audit(1719880099.616:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.612946] audit: type=1130 audit(1719880099.962:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 57.758681] audit: type=1131 audit(1719880100.108:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 59.019721] audit: type=1130 audit(1719880101.369:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.023463] audit: type=1131 audit(1719880101.369:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 59.653299] audit: type=1334 audit(1719880102.003:251): prog-id=41 op=LOAD [ 59.654581] audit: type=1334 audit(1719880102.005:252): prog-id=24 op=UNLOAD [ 59.659153] audit: type=1334 audit(1719880102.009:253): prog-id=42 op=LOAD [ 59.660440] audit: type=1334 audit(1719880102.011:254): prog-id=35 op=UNLOAD [ 59.661939] audit: type=1334 audit(1719880102.012:255): prog-id=43 op=LOAD [ 59.663233] audit: type=1334 audit(1719880102.014:256): prog-id=44 op=LOAD [ 59.665800] audit: type=1334 audit(1719880102.015:257): prog-id=36 op=UNLOAD [ 59.666995] audit: type=1334 audit(1719880102.015:258): prog-id=37 op=UNLOAD [ 66.459951] kauditd_printk_skb: 131 callbacks suppressed [ 66.459956] audit: type=1400 audit(1719880108.811:330): avc: denied { watch } for pid=2830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="overlay" ino=7798 scontext=system_u:system_r:container_t:s0:c258,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 66.466304] audit: type=1300 audit(1719880108.811:330): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40067a82d0 a2=fc6 a3=0 items=0 ppid=2691 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c258,c941 key=(null) [ 66.475179] audit: type=1327 audit(1719880108.811:330): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E313539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 66.481590] audit: type=1400 audit(1719880108.823:331): avc: denied { watch } for pid=2830 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c258,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 66.487555] audit: type=1300 audit(1719880108.823:331): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4001f00300 a2=fc6 a3=0 items=0 ppid=2691 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c258,c941 key=(null) [ 66.494273] audit: type=1327 audit(1719880108.823:331): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E313539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 66.502472] audit: type=1400 audit(1719880108.828:332): avc: denied { watch } for pid=2830 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="overlay" ino=7794 scontext=system_u:system_r:container_t:s0:c258,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 66.507130] audit: type=1300 audit(1719880108.828:332): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4008036750 a2=fc6 a3=0 items=0 ppid=2691 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:container_t:s0:c258,c941 key=(null) [ 66.515523] audit: type=1327 audit(1719880108.828:332): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E313539002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 [ 66.520815] audit: type=1400 audit(1719880108.845:333): avc: denied { watch } for pid=2830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="overlay" ino=7800 scontext=system_u:system_r:container_t:s0:c258,c941 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 67.438057] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2923) [ 67.899565] BTRFS warning: duplicate device /dev/nvme0n1p3 devid 1 generation 35 scanned by (udev-worker) (2925) [ 76.219549] kauditd_printk_skb: 56 callbacks suppressed [ 76.219553] audit: type=1106 audit(1719880118.570:380): pid=2123 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 76.224845] audit: type=1104 audit(1719880118.571:381): pid=2123 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 76.246663] audit: type=1106 audit(1719880118.596:382): pid=2120 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.253379] audit: type=1104 audit(1719880118.597:383): pid=2120 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 76.258244] audit: type=1131 audit(1719880118.604:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.159:22-139.178.89.65:39106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 80.863167] audit: type=1400 audit(1719880123.214:385): avc: denied { watch } for pid=2858 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7826 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 [ 80.867879] audit: type=1300 audit(1719880123.214:385): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b86840 a2=fc6 a3=0 items=0 ppid=2693 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c765,c955 key=(null) [ 80.874447] audit: type=1327 audit(1719880123.214:385): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 81.179107] audit: type=1400 audit(1719880123.530:386): avc: denied { watch } for pid=2858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 81.184725] audit: type=1300 audit(1719880123.530:386): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000cc9d40 a2=fc6 a3=0 items=0 ppid=2693 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c765,c955 key=(null) [ 86.420450] kauditd_printk_skb: 10 callbacks suppressed [ 86.420454] audit: type=1334 audit(1719880128.771:390): prog-id=99 op=LOAD [ 86.423801] audit: type=1334 audit(1719880128.774:391): prog-id=100 op=LOAD [ 86.425017] audit: type=1300 audit(1719880128.774:391): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400018d8b0 a2=78 a3=0 items=0 ppid=3257 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.430442] audit: type=1327 audit(1719880128.774:391): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036663164316562643039306635333632313361633537383532353230 [ 86.435270] audit: type=1334 audit(1719880128.774:392): prog-id=101 op=LOAD [ 86.436932] audit: type=1300 audit(1719880128.774:392): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400018d640 a2=78 a3=0 items=0 ppid=3257 pid=3266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 86.446574] audit: type=1327 audit(1719880128.774:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036663164316562643039306635333632313361633537383532353230 [ 86.454634] audit: type=1334 audit(1719880128.774:393): prog-id=101 op=UNLOAD [ 86.457143] audit: type=1334 audit(1719880128.774:394): prog-id=100 op=UNLOAD [ 86.459248] audit: type=1334 audit(1719880128.774:395): prog-id=102 op=LOAD [ 93.622104] kauditd_printk_skb: 190 callbacks suppressed [ 93.622108] audit: type=1325 audit(1719880135.974:464): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.625964] audit: type=1300 audit(1719880135.974:464): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffdc3b6000 a2=0 a3=1 items=0 ppid=3309 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.631267] audit: type=1327 audit(1719880135.974:464): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.635822] audit: type=1325 audit(1719880135.976:465): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.638688] audit: type=1300 audit(1719880135.976:465): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdc3b6000 a2=0 a3=1 items=0 ppid=3309 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.644164] audit: type=1327 audit(1719880135.976:465): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.646880] audit: type=1325 audit(1719880135.998:466): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 93.649672] audit: type=1300 audit(1719880135.998:466): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffe8b91e30 a2=0 a3=1 items=0 ppid=3309 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 93.655240] audit: type=1327 audit(1719880135.998:466): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 93.659443] audit: type=1325 audit(1719880136.000:467): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.214022] kauditd_printk_skb: 56 callbacks suppressed [ 103.214026] audit: type=1334 audit(1719880145.566:494): prog-id=129 op=LOAD [ 103.216331] audit: type=1300 audit(1719880145.566:494): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001318b0 a2=78 a3=0 items=0 ppid=3651 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.221646] audit: type=1327 audit(1719880145.566:494): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373766376164343061346561353338353137363164303030303863 [ 103.227825] audit: type=1334 audit(1719880145.566:495): prog-id=130 op=LOAD [ 103.229741] audit: type=1300 audit(1719880145.566:495): arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000131640 a2=78 a3=0 items=0 ppid=3651 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.234958] audit: type=1327 audit(1719880145.566:495): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461373766376164343061346561353338353137363164303030303863 [ 103.240220] audit: type=1334 audit(1719880145.567:496): prog-id=130 op=UNLOAD [ 103.243900] audit: type=1334 audit(1719880145.567:497): prog-id=129 op=UNLOAD [ 103.251443] audit: type=1334 audit(1719880145.567:498): prog-id=131 op=LOAD [ 103.252779] audit: type=1300 audit(1719880145.567:498): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000131b10 a2=78 a3=0 items=0 ppid=3651 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.919791] kauditd_printk_skb: 2 callbacks suppressed [ 111.919795] audit: type=1334 audit(1719880154.272:500): prog-id=132 op=LOAD [ 111.922667] audit: type=1300 audit(1719880154.272:500): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001398b0 a2=78 a3=0 items=0 ppid=3651 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.927748] audit: type=1327 audit(1719880154.272:500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643333623864353431356334623635643061636337376438386136 [ 111.933623] audit: type=1334 audit(1719880154.275:501): prog-id=133 op=LOAD [ 111.936205] audit: type=1300 audit(1719880154.275:501): arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000139640 a2=78 a3=0 items=0 ppid=3651 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.945375] audit: type=1327 audit(1719880154.275:501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166643333623864353431356334623635643061636337376438386136 [ 111.950593] audit: type=1334 audit(1719880154.275:502): prog-id=133 op=UNLOAD [ 111.952125] audit: type=1334 audit(1719880154.275:503): prog-id=132 op=UNLOAD [ 111.953420] audit: type=1334 audit(1719880154.275:504): prog-id=134 op=LOAD [ 111.954711] audit: type=1300 audit(1719880154.275:504): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000139b10 a2=78 a3=0 items=0 ppid=3651 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.165970] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 112.167353] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:17 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:19 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: [ 118.054739] kauditd_printk_skb: 74 callbacks suppressed [ 118.054744] audit: type=1130 audit(1719880160.407:526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.24.159:22-139.178.89.65:40018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 118.231118] audit: type=1101 audit(1719880160.583:527): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.237970] audit: type=1103 audit(1719880160.590:528): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.242754] audit: type=1006 audit(1719880160.591:529): pid=4426 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 [ 118.246139] audit: type=1300 audit(1719880160.591:529): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe36b1e20 a2=3 a3=1 items=0 ppid=1 pid=4426 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.250867] audit: type=1327 audit(1719880160.591:529): proctitle=737368643A20636F7265205B707269765D [ 118.280934] audit: type=1105 audit(1719880160.633:530): pid=4426 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.289732] audit: type=1103 audit(1719880160.641:531): pid=4428 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.568794] audit: type=1106 audit(1719880160.921:532): pid=4426 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 118.575092] audit: type=1104 audit(1719880160.922:533): pid=4426 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 119.354540] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 119.355699] IPv6: ADDRCONF(NETDEV_CHANGE): cali0ffb3e5b5be: link becomes ready [ 119.478501] IPv6: ADDRCONF(NETDEV_CHANGE): cali99818197651: link becomes ready [ 121.211682] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 121.214316] IPv6: ADDRCONF(NETDEV_CHANGE): calid5a9fd1c96d: link becomes ready [ 121.405414] IPv6: ADDRCONF(NETDEV_CHANGE): cali0690b632420: link becomes ready This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:23 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:24 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: [ 123.605797] kauditd_printk_skb: 117 callbacks suppressed [ 123.605802] audit: type=1130 audit(1719880165.958:587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.24.159:22-139.178.89.65:40026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 123.783539] audit: type=1101 audit(1719880166.136:588): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.788329] audit: type=1103 audit(1719880166.136:589): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.792985] audit: type=1006 audit(1719880166.136:590): pid=4966 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 123.796100] audit: type=1300 audit(1719880166.136:590): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda0f3810 a2=3 a3=1 items=0 ppid=1 pid=4966 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.801284] audit: type=1327 audit(1719880166.136:590): proctitle=737368643A20636F7265205B707269765D This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:26 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: [ 123.833989] audit: type=1105 audit(1719880166.186:591): pid=4966 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 123.840749] audit: type=1103 audit(1719880166.192:592): pid=4968 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.117797] audit: type=1106 audit(1719880166.470:593): pid=4966 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 124.124827] audit: type=1104 audit(1719880166.470:594): pid=4966 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:29:27 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: [ 128.841579] kauditd_printk_skb: 37 callbacks suppressed [ 128.841583] audit: type=1334 audit(1719880171.194:610): prog-id=170 op=LOAD [ 128.843786] audit: type=1300 audit(1719880171.194:610): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001398b0 a2=78 a3=0 items=0 ppid=4601 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.850998] audit: type=1327 audit(1719880171.194:610): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735313066393936386337306238303339613462393233353139316433 [ 128.856538] audit: type=1334 audit(1719880171.194:611): prog-id=171 op=LOAD [ 128.858499] audit: type=1300 audit(1719880171.194:611): arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000139640 a2=78 a3=0 items=0 ppid=4601 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.864260] audit: type=1327 audit(1719880171.194:611): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735313066393936386337306238303339613462393233353139316433 [ 128.869435] audit: type=1334 audit(1719880171.195:612): prog-id=171 op=UNLOAD [ 128.870893] audit: type=1334 audit(1719880171.195:613): prog-id=170 op=UNLOAD [ 128.872544] audit: type=1334 audit(1719880171.195:614): prog-id=172 op=LOAD [ 128.874178] audit: type=1300 audit(1719880171.195:614): arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000139b10 a2=78 a3=0 items=0 ppid=4601 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.854489] kauditd_printk_skb: 34 callbacks suppressed [ 135.854493] audit: type=1130 audit(1719880178.207:642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.24.159:22-139.178.89.65:44610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 136.024299] audit: type=1101 audit(1719880178.377:643): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.031060] audit: type=1103 audit(1719880178.383:644): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.035651] audit: type=1006 audit(1719880178.383:645): pid=5373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 136.039077] audit: type=1300 audit(1719880178.383:645): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1dd6d60 a2=3 a3=1 items=0 ppid=1 pid=5373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.044537] audit: type=1327 audit(1719880178.383:645): proctitle=737368643A20636F7265205B707269765D [ 136.069742] audit: type=1105 audit(1719880178.421:646): pid=5373 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.075796] audit: type=1103 audit(1719880178.424:647): pid=5375 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.312084] audit: type=1106 audit(1719880178.664:648): pid=5373 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 136.319599] audit: type=1104 audit(1719880178.666:649): pid=5373 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 141.178930] kauditd_printk_skb: 1 callbacks suppressed [ 141.178935] audit: type=1400 audit(1719880183.532:651): avc: denied { watch } for pid=2858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 141.184314] audit: type=1300 audit(1719880183.532:651): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f6a80 a2=fc6 a3=0 items=0 ppid=2693 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c765,c955 key=(null) [ 141.189979] audit: type=1327 audit(1719880183.532:651): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 141.194761] audit: type=1400 audit(1719880183.536:652): avc: denied { watch } for pid=2858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 141.198962] audit: type=1300 audit(1719880183.536:652): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f6ac0 a2=fc6 a3=0 items=0 ppid=2693 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c765,c955 key=(null) [ 141.204539] audit: type=1327 audit(1719880183.536:652): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 141.209216] audit: type=1400 audit(1719880183.538:653): avc: denied { watch } for pid=2858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 141.213402] audit: type=1300 audit(1719880183.538:653): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bcdba0 a2=fc6 a3=0 items=0 ppid=2693 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:container_t:s0:c765,c955 key=(null) [ 141.218959] audit: type=1327 audit(1719880183.538:653): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 141.223679] audit: type=1400 audit(1719880183.538:654): avc: denied { watch } for pid=2858 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="overlay" ino=7792 scontext=system_u:system_r:container_t:s0:c765,c955 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 146.850632] kauditd_printk_skb: 13 callbacks suppressed [ 146.850637] audit: type=1130 audit(1719880189.203:664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.159:22-139.178.89.65:52138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 147.023722] audit: type=1101 audit(1719880189.376:665): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.028545] audit: type=1103 audit(1719880189.376:666): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.033357] audit: type=1006 audit(1719880189.376:667): pid=5432 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 147.036255] audit: type=1300 audit(1719880189.376:667): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd766cd00 a2=3 a3=1 items=0 ppid=1 pid=5432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.041506] audit: type=1327 audit(1719880189.376:667): proctitle=737368643A20636F7265205B707269765D [ 147.063832] audit: type=1105 audit(1719880189.416:668): pid=5432 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.070093] audit: type=1103 audit(1719880189.422:669): pid=5434 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.326591] audit: type=1106 audit(1719880189.679:670): pid=5432 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 147.333048] audit: type=1104 audit(1719880189.679:671): pid=5432 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.361364] kauditd_printk_skb: 1 callbacks suppressed [ 152.361368] audit: type=1130 audit(1719880194.714:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.24.159:22-139.178.89.65:52142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 152.527786] audit: type=1101 audit(1719880194.880:674): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.532497] audit: type=1103 audit(1719880194.883:675): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.537133] audit: type=1006 audit(1719880194.883:676): pid=5446 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 152.540373] audit: type=1300 audit(1719880194.883:676): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe18f1280 a2=3 a3=1 items=0 ppid=1 pid=5446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.546473] audit: type=1327 audit(1719880194.883:676): proctitle=737368643A20636F7265205B707269765D [ 152.567171] audit: type=1105 audit(1719880194.919:677): pid=5446 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.573118] audit: type=1103 audit(1719880194.925:678): pid=5448 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.814965] audit: type=1106 audit(1719880195.167:679): pid=5446 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 152.821501] audit: type=1104 audit(1719880195.167:680): pid=5446 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.826068] kauditd_printk_skb: 43 callbacks suppressed [ 157.826073] audit: type=1106 audit(1719880200.178:710): pid=5493 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.844082] audit: type=1104 audit(1719880200.178:711): pid=5493 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 157.848530] audit: type=1131 audit(1719880200.186:712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.24.159:22-139.178.89.65:51220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 157.867369] audit: type=1130 audit(1719880200.220:713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.24.159:22-139.178.89.65:51226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 158.049433] audit: type=1101 audit(1719880200.402:714): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.056186] audit: type=1103 audit(1719880200.408:715): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 158.061845] audit: type=1006 audit(1719880200.409:716): pid=5506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 158.065395] audit: type=1300 audit(1719880200.409:716): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9610b80 a2=3 a3=1 items=0 ppid=1 pid=5506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.071425] audit: type=1327 audit(1719880200.409:716): proctitle=737368643A20636F7265205B707269765D [ 158.097277] audit: type=1105 audit(1719880200.450:717): pid=5506 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.421935] kauditd_printk_skb: 10 callbacks suppressed [ 163.421940] audit: type=1130 audit(1719880205.774:724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.24.159:22-139.178.89.65:51228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.597179] audit: type=1101 audit(1719880205.950:725): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.606170] audit: type=1103 audit(1719880205.957:726): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.611391] audit: type=1006 audit(1719880205.957:727): pid=5521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 163.614791] audit: type=1300 audit(1719880205.957:727): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe73c3c60 a2=3 a3=1 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 163.619922] audit: type=1327 audit(1719880205.957:727): proctitle=737368643A20636F7265205B707269765D [ 163.644833] audit: type=1105 audit(1719880205.997:728): pid=5521 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.651563] audit: type=1103 audit(1719880206.004:729): pid=5523 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.921531] audit: type=1106 audit(1719880206.274:730): pid=5521 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 163.926954] audit: type=1104 audit(1719880206.274:731): pid=5521 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 168.952848] kauditd_printk_skb: 1 callbacks suppressed [ 168.952852] audit: type=1130 audit(1719880211.305:733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.24.159:22-139.178.89.65:58764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.128355] audit: type=1101 audit(1719880211.480:734): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.133459] audit: type=1103 audit(1719880211.483:735): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.138679] audit: type=1006 audit(1719880211.483:736): pid=5557 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 169.142805] audit: type=1300 audit(1719880211.483:736): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddee7630 a2=3 a3=1 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.147781] audit: type=1327 audit(1719880211.483:736): proctitle=737368643A20636F7265205B707269765D [ 169.171665] audit: type=1105 audit(1719880211.524:737): pid=5557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.177170] audit: type=1103 audit(1719880211.527:738): pid=5559 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.436828] audit: type=1106 audit(1719880211.789:739): pid=5557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 169.443688] audit: type=1104 audit(1719880211.791:740): pid=5557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 173.846898] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 173.848233] IPv6: ADDRCONF(NETDEV_CHANGE): cali6d1a24477b6: link becomes ready [ 173.983299] kauditd_printk_skb: 13 callbacks suppressed [ 173.983304] audit: type=1325 audit(1719880216.335:746): table=filter:122 family=2 entries=51 op=nft_register_chain pid=5646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 173.986985] audit: type=1300 audit(1719880216.335:746): arch=c00000b7 syscall=211 success=yes exit=26260 a0=3 a1=fffff73069d0 a2=0 a3=ffff8aa45fa8 items=0 ppid=4229 pid=5646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.994437] audit: type=1327 audit(1719880216.335:746): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 174.060859] audit: type=1334 audit(1719880216.413:747): prog-id=173 op=LOAD [ 174.062738] audit: type=1334 audit(1719880216.415:748): prog-id=174 op=LOAD [ 174.063984] audit: type=1300 audit(1719880216.415:748): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400010d8b0 a2=78 a3=0 items=0 ppid=5636 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.069759] audit: type=1327 audit(1719880216.415:748): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653037636537393139393835643932343031303837366535626232 [ 174.075714] audit: type=1334 audit(1719880216.415:749): prog-id=175 op=LOAD [ 174.077092] audit: type=1300 audit(1719880216.415:749): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400010d640 a2=78 a3=0 items=0 ppid=5636 pid=5647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.082431] audit: type=1327 audit(1719880216.415:749): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653037636537393139393835643932343031303837366535626232 This is ip-172-31-24-159 (Linux aarch64 6.1.96-flatcar) 00:30:19 SSH host key: SHA256:vlm+YQiFt/VaS9CNbuc0OasR9bSgarZ0Thayo45lsGE (ECDSA) SSH host key: SHA256:wXtfz5gKxg+aGawuVA7qrCyTF0GprNZv79lbJr1RveA (RSA) SSH host key: SHA256:QEGx3z2LaECEnT/MVXuVqMgeGhJTAk0sobmV4k/OccI (ED25519) eth0: 172.31.24.159 fe80::4e0:f1ff:fe13:f271 ip-172-31-24-159 login: [ 179.489237] kauditd_printk_skb: 40 callbacks suppressed [ 179.489241] audit: type=1325 audit(1719880221.841:772): table=filter:127 family=2 entries=9 op=nft_register_rule pid=5742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.493239] audit: type=1300 audit(1719880221.841:772): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffc47ec920 a2=0 a3=1 items=0 ppid=3309 pid=5742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.499260] audit: type=1327 audit(1719880221.841:772): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 179.501834] audit: type=1325 audit(1719880221.845:773): table=nat:128 family=2 entries=51 op=nft_register_chain pid=5742 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 179.504630] audit: type=1300 audit(1719880221.845:773): arch=c00000b7 syscall=211 success=yes exit=18564 a0=3 a1=ffffc47ec920 a2=0 a3=1 items=0 ppid=3309 pid=5742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.511047] audit: type=1327 audit(1719880221.845:773): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 179.983668] audit: type=1130 audit(1719880222.335:774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.159:22-139.178.89.65:55268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.157291] audit: type=1101 audit(1719880222.510:775): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.164695] audit: type=1103 audit(1719880222.517:776): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 180.169227] audit: type=1006 audit(1719880222.517:777): pid=5744 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 185.511970] kauditd_printk_skb: 13 callbacks suppressed [ 185.511976] audit: type=1130 audit(1719880227.862:785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.159:22-139.178.89.65:55270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.692570] audit: type=1101 audit(1719880228.045:786): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.697256] audit: type=1103 audit(1719880228.048:787): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.706978] audit: type=1006 audit(1719880228.048:788): pid=5761 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 185.711336] audit: type=1300 audit(1719880228.048:788): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea5a5370 a2=3 a3=1 items=0 ppid=1 pid=5761 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.716775] audit: type=1327 audit(1719880228.048:788): proctitle=737368643A20636F7265205B707269765D [ 185.731627] audit: type=1105 audit(1719880228.084:789): pid=5761 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.740140] audit: type=1103 audit(1719880228.092:790): pid=5763 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.993379] audit: type=1106 audit(1719880228.346:791): pid=5761 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 185.999285] audit: type=1104 audit(1719880228.346:792): pid=5761 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.035746] kauditd_printk_skb: 25 callbacks suppressed [ 191.035750] audit: type=1130 audit(1719880233.388:802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.24.159:22-139.178.89.65:46702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 191.205414] audit: type=1101 audit(1719880233.558:803): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.212407] audit: type=1103 audit(1719880233.565:804): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.217193] audit: type=1006 audit(1719880233.565:805): pid=5778 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 191.220567] audit: type=1300 audit(1719880233.565:805): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffead7f410 a2=3 a3=1 items=0 ppid=1 pid=5778 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.225648] audit: type=1327 audit(1719880233.565:805): proctitle=737368643A20636F7265205B707269765D [ 191.252607] audit: type=1105 audit(1719880233.605:806): pid=5778 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.258818] audit: type=1103 audit(1719880233.611:807): pid=5780 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.519178] audit: type=1106 audit(1719880233.872:808): pid=5778 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 191.525417] audit: type=1104 audit(1719880233.873:809): pid=5778 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.558015] kauditd_printk_skb: 7 callbacks suppressed [ 196.558020] audit: type=1130 audit(1719880238.911:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.24.159:22-139.178.89.65:57832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.737394] audit: type=1101 audit(1719880239.090:814): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.742379] audit: type=1103 audit(1719880239.090:815): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.747697] audit: type=1006 audit(1719880239.090:816): pid=5838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 196.752724] audit: type=1300 audit(1719880239.090:816): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc0ab3f0 a2=3 a3=1 items=0 ppid=1 pid=5838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.759129] audit: type=1327 audit(1719880239.090:816): proctitle=737368643A20636F7265205B707269765D [ 196.781751] audit: type=1105 audit(1719880239.134:817): pid=5838 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 196.790128] audit: type=1103 audit(1719880239.142:818): pid=5840 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.113874] audit: type=1106 audit(1719880239.466:819): pid=5838 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 197.120436] audit: type=1104 audit(1719880239.467:820): pid=5838 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.151565] kauditd_printk_skb: 13 callbacks suppressed [ 202.151571] audit: type=1130 audit(1719880244.504:826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.24.159:22-139.178.89.65:57834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.328077] audit: type=1101 audit(1719880244.681:827): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.332802] audit: type=1103 audit(1719880244.681:828): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.337490] audit: type=1006 audit(1719880244.681:829): pid=5876 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 [ 202.340403] audit: type=1300 audit(1719880244.681:829): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc7a26e0 a2=3 a3=1 items=0 ppid=1 pid=5876 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.348914] audit: type=1327 audit(1719880244.681:829): proctitle=737368643A20636F7265205B707269765D [ 202.367702] audit: type=1105 audit(1719880244.720:830): pid=5876 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.373724] audit: type=1103 audit(1719880244.726:831): pid=5880 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.627038] audit: type=1106 audit(1719880244.980:832): pid=5876 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 202.632688] audit: type=1104 audit(1719880244.981:833): pid=5876 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.665856] kauditd_printk_skb: 1 callbacks suppressed [ 207.665861] audit: type=1130 audit(1719880250.019:835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.24.159:22-139.178.89.65:33030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.835577] audit: type=1101 audit(1719880250.188:836): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.840663] audit: type=1103 audit(1719880250.188:837): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.845824] audit: type=1006 audit(1719880250.188:838): pid=5892 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 [ 207.850127] audit: type=1300 audit(1719880250.188:838): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9b380a0 a2=3 a3=1 items=0 ppid=1 pid=5892 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.856018] audit: type=1327 audit(1719880250.188:838): proctitle=737368643A20636F7265205B707269765D [ 207.876971] audit: type=1105 audit(1719880250.230:839): pid=5892 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 207.883515] audit: type=1103 audit(1719880250.236:840): pid=5895 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.132943] audit: type=1106 audit(1719880250.486:841): pid=5892 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 208.139480] audit: type=1104 audit(1719880250.486:842): pid=5892 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' [ 221.569296] kauditd_printk_skb: 1 callbacks suppressed [ 221.569301] audit: type=1334 audit(1719880263.922:844): prog-id=74 op=UNLOAD [ 221.571578] audit: type=1334 audit(1719880263.922:845): prog-id=93 op=UNLOAD [ 222.207575] audit: type=1334 audit(1719880264.560:846): prog-id=110 op=UNLOAD [ 222.210300] audit: type=1334 audit(1719880264.563:847): prog-id=113 op=UNLOAD [ 222.445548] audit: type=1334 audit(1719880264.798:848): prog-id=181 op=LOAD [ 222.447727] audit: type=1334 audit(1719880264.800:849): prog-id=182 op=LOAD [ 222.448976] audit: type=1300 audit(1719880264.800:849): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400010d8b0 a2=78 a3=0 items=0 ppid=3344 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.455063] audit: type=1327 audit(1719880264.800:849): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036633066616334646236326233383165623061616361656335623162 [ 222.466125] audit: type=1334 audit(1719880264.800:850): prog-id=183 op=LOAD [ 222.470346] audit: type=1300 audit(1719880264.800:850): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400010d640 a2=78 a3=0 items=0 ppid=3344 pid=5996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.813011] kauditd_printk_skb: 24 callbacks suppressed [ 226.813016] audit: type=1334 audit(1719880269.166:862): prog-id=78 op=UNLOAD [ 226.815281] audit: type=1334 audit(1719880269.166:863): prog-id=91 op=UNLOAD [ 227.443274] audit: type=1334 audit(1719880269.796:864): prog-id=189 op=LOAD [ 227.445299] audit: type=1334 audit(1719880269.798:865): prog-id=190 op=LOAD [ 227.446676] audit: type=1300 audit(1719880269.798:865): arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400010d8b0 a2=78 a3=0 items=0 ppid=2692 pid=6110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.452744] audit: type=1327 audit(1719880269.798:865): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435383361613235643839643566656362643437303936313234333335 [ 227.457635] audit: type=1334 audit(1719880269.798:866): prog-id=191 op=LOAD [ 227.459086] audit: type=1300 audit(1719880269.798:866): arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400010d640 a2=78 a3=0 items=0 ppid=2692 pid=6110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 227.464192] audit: type=1327 audit(1719880269.798:866): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435383361613235643839643566656362643437303936313234333335 [ 227.469176] audit: type=1334 audit(1719880269.800:867): prog-id=191 op=UNLOAD