m PID 1 (systemd). [ 9.546437] SELinux: policy capability network_peer_controls=1 [ 9.548188] SELinux: policy capability open_perms=1 [ 9.549437] SELinux: policy capability extended_socket_class=1 [ 9.550618] SELinux: policy capability always_check_network=0 [ 9.552002] SELinux: policy capability cgroup_seclabel=1 [ 9.553097] SELinux: policy capability nnp_nosuid_transition=1 [ 9.554292] SELinux: policy capability genfs_seclabel_symlinks=0 [ 9.555769] SELinux: policy capability ioctl_skip_cloexec=0 [ 9.557055] SELinux: policy capability userspace_initial_context=0 [ 9.584543] systemd[1]: Successfully loaded SELinux policy in 65.734ms. [ 9.636520] systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 6.505ms. [ 9.641041] systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) [ 9.648291] systemd[1]: Detected virtualization amazon. [ 9.649549] systemd[1]: Detected architecture x86-64. [ 9.650843] systemd[1]: Detected first boot. [ 9.652998] systemd[1]: Initializing machine ID from SMBIOS/DMI UUID. [ 9.726741] zram_generator::config[1389]: No configuration found. [ 9.741486] Guest personality initialized and is inactive [ 9.743605] VMCI host device registered (name=vmci, major=10, minor=258) [ 9.744736] Initialized host personality [ 9.750349] NET: Registered PF_VSOCK protocol family [ 10.127861] systemd[1]: Populated /etc with preset unit settings. [ 10.329035] kauditd_printk_skb: 51 callbacks suppressed [ 10.329038] audit: type=1334 audit(1768437619.379:90): prog-id=12 op=LOAD [ 10.331085] audit: type=1334 audit(1768437619.379:91): prog-id=3 op=UNLOAD [ 10.332113] audit: type=1334 audit(1768437619.379:92): prog-id=13 op=LOAD [ 10.333109] audit: type=1334 audit(1768437619.379:93): prog-id=14 op=LOAD [ 10.334080] audit: type=1334 audit(1768437619.379:94): prog-id=4 op=UNLOAD [ 10.335083] audit: type=1334 audit(1768437619.379:95): prog-id=5 op=UNLOAD [ 10.336067] audit: type=1131 audit(1768437619.382:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.336963] systemd[1]: initrd-switch-root.service: Deactivated successfully. [ 10.340749] systemd[1]: Stopped initrd-switch-root.service - Switch Root. [ 10.341835] audit: type=1334 audit(1768437619.392:97): prog-id=12 op=UNLOAD [ 10.343293] audit: type=1130 audit(1768437619.394:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.344244] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 10.346852] audit: type=1131 audit(1768437619.394:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 10.348183] systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. [ 10.354051] systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. [ 10.356164] systemd[1]: Created slice system-getty.slice - Slice /system/getty. [ 10.358038] systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. [ 10.359988] systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. [ 10.362007] systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. [ 10.364440] systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. [ 10.366460] systemd[1]: Created slice user.slice - User and Session Slice. [ 10.367936] systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. [ 10.370133] systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. [ 10.372552] systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. [ 10.375798] systemd[1]: Set up automount boot.automount - Boot partition Automount Point. [ 10.377717] systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. [ 10.380421] systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... [ 10.382491] systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... [ 10.383918] systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). [ 10.385602] systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. [ 10.387204] systemd[1]: Stopped target initrd-switch-root.target - Switch Root. [ 10.388733] systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. [ 10.390244] systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. [ 10.391867] systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. [ 10.393612] systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. [ 10.395253] systemd[1]: Reached target remote-fs.target - Remote File Systems. [ 10.396755] systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. [ 10.398757] systemd[1]: Reached target slices.target - Slice Units. [ 10.400109] systemd[1]: Reached target swap.target - Swaps. [ 10.401380] systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. [ 10.404545] systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. [ 10.406921] systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. [ 10.410443] systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. [ 10.412938] systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. [ 10.415525] systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. [ 10.418080] systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. [ 10.420473] systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. [ 10.424818] systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. [ 10.426723] systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. [ 10.429806] systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. [ 10.433943] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... [ 10.439376] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... [ 10.444059] systemd[1]: Mounting media.mount - External Media Directory... [ 10.446084] systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 10.450723] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... [ 10.461404] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... [ 10.468401] systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... [ 10.470049] systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). [ 10.473066] systemd[1]: Reached target machines.target - Containers. [ 10.478407] systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... [ 10.480869] systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. [ 10.490288] systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... [ 10.495433] systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... [ 10.499699] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... [ 10.509372] systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... [ 10.519512] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... [ 10.528182] systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... [ 10.536525] systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... [ 10.540704] systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). [ 10.546455] systemd[1]: systemd-fsck-root.service: Deactivated successfully. [ 10.548161] systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. [ 10.552070] systemd[1]: systemd-fsck-usr.service: Deactivated successfully. [ 10.554366] systemd[1]: Stopped systemd-fsck-usr.service. [ 10.557415] systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). [ 10.569544] systemd[1]: Starting systemd-journald.service - Journal Service... [ 10.576497] systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... [ 10.585578] systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... [ 10.594518] systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... [ 10.613486] systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... [ 10.625572] systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... [ 10.629796] systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). [ 10.640955] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. [ 10.645195] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. [ 10.649063] systemd[1]: Mounted media.mount - External Media Directory. [ 10.652522] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. [ 10.656567] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. [ 10.660118] systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. [ 10.663802] systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. [ 10.668440] systemd[1]: modprobe@configfs.service: Deactivated successfully. [ 10.671536] systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. [ 10.677059] systemd[1]: modprobe@dm_mod.service: Deactivated successfully. [ 10.678576] ACPI: bus type drm_connector registered [ 10.681587] systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. [ 10.684611] systemd[1]: modprobe@drm.service: Deactivated successfully. [ 10.687098] fuse: init (API version 7.41) [ 10.687566] systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. [ 10.691223] systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. [ 10.694310] systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. [ 10.697387] systemd[1]: modprobe@fuse.service: Deactivated successfully. [ 10.699565] systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. [ 10.703245] systemd[1]: modprobe@loop.service: Deactivated successfully. [ 10.705572] systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. [ 10.709073] systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. [ 10.713889] systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. [ 10.715023] systemd-journald[1475]: Collecting audit messages is enabled. [ 10.721698] systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. [ 10.726586] systemd[1]: Started systemd-journald.service - Journal Service. [ 10.817463] systemd-journald[1475]: Received client request to flush runtime journal. [ 10.866790] loop1: detected capacity change from 0 to 73200 [ 11.249515] loop2: detected capacity change from 0 to 119256 [ 11.569160] loop3: detected capacity change from 0 to 111544 [ 11.822897] mousedev: PS/2 mouse device common for all mice [ 11.840452] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input4 [ 11.850557] piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr [ 11.852464] ACPI: button: Power Button [PWRF] [ 11.853684] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input5 [ 11.855121] ACPI: button: Sleep Button [SLPF] [ 11.892299] loop4: detected capacity change from 0 to 229808 [ 12.217780] loop5: detected capacity change from 0 to 73200 [ 12.247561] loop6: detected capacity change from 0 to 119256 [ 12.275150] loop7: detected capacity change from 0 to 111544 [ 12.297596] loop1: detected capacity change from 0 to 229808 [ 12.400543] zram_generator::config[1737]: No configuration found. [ 12.814207] zram_generator::config[1827]: No configuration found. [ 14.092350] EXT4-fs (nvme0n1p9): resizing filesystem from 1617920 to 2604027 blocks [ 14.166322] EXT4-fs (nvme0n1p9): resized filesystem to 2604027 2026/01/15 00:40:25Z: Amazon SSM Agent v3.3.0.0 is running 2026/01/15 00:40:25Z: OsProductName: Flatcar Container Linux by Kinvolk 2026/01/15 00:40:25Z: OsVersion: 4515.1.0 [!p]104[?7h This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:40:29 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:40:29 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 31.649280] kauditd_printk_skb: 145 callbacks suppressed [ 31.649283] audit: type=1305 audit(1768437641.875:241): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 [ 31.652050] audit: type=1300 audit(1768437641.875:241): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff6a529000 a2=420 a3=0 items=0 ppid=2323 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) [ 31.656961] audit: type=1327 audit(1768437641.875:241): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 [ 31.658753] audit: type=1130 audit(1768437641.882:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 31.661736] audit: type=1131 audit(1768437641.882:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 31.664636] audit: type=1106 audit(1768437641.885:244): pid=2318 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 31.668010] audit: type=1104 audit(1768437641.885:245): pid=2318 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 31.739516] audit: type=1106 audit(1768437641.966:246): pid=2301 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 31.745937] audit: type=1104 audit(1768437641.966:247): pid=2301 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 31.750293] audit: type=1131 audit(1768437641.968:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.124:22-20.161.92.111:43560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 33.238741] Initializing XFRM netlink socket This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:40:44 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:40:44 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 42.075039] kauditd_printk_skb: 132 callbacks suppressed [ 42.075043] audit: type=1130 audit(1768437652.301:299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 42.181008] audit: type=1131 audit(1768437652.407:300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 45.056684] audit: type=1131 audit(1768437655.283:301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 45.076383] audit: type=1334 audit(1768437655.303:302): prog-id=66 op=UNLOAD [ 51.252037] audit: type=1130 audit(1768437661.478:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.257389] audit: type=1131 audit(1768437661.478:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 51.451082] zram_generator::config[2863]: No configuration found. [ 51.816500] audit: type=1334 audit(1768437662.041:305): prog-id=70 op=LOAD [ 51.817898] audit: type=1334 audit(1768437662.041:306): prog-id=69 op=UNLOAD [ 51.828295] audit: type=1334 audit(1768437662.042:307): prog-id=71 op=LOAD [ 51.830664] audit: type=1334 audit(1768437662.042:308): prog-id=72 op=LOAD [ 51.836839] audit: type=1334 audit(1768437662.042:309): prog-id=61 op=UNLOAD [ 51.838133] audit: type=1334 audit(1768437662.045:310): prog-id=62 op=UNLOAD [ 51.839494] audit: type=1334 audit(1768437662.046:311): prog-id=73 op=LOAD [ 51.840649] audit: type=1334 audit(1768437662.046:312): prog-id=55 op=UNLOAD [ 61.692065] zram_generator::config[3355]: No configuration found. [ 62.016879] kauditd_printk_skb: 202 callbacks suppressed [ 62.016882] audit: type=1131 audit(1768437672.243:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.024293] audit: type=1334 audit(1768437672.250:408): prog-id=120 op=LOAD [ 62.025649] audit: type=1334 audit(1768437672.250:409): prog-id=84 op=UNLOAD [ 62.027607] audit: type=1334 audit(1768437672.250:410): prog-id=121 op=LOAD [ 62.028745] audit: type=1334 audit(1768437672.250:411): prog-id=122 op=LOAD [ 62.030002] audit: type=1334 audit(1768437672.250:412): prog-id=85 op=UNLOAD [ 62.031103] audit: type=1334 audit(1768437672.250:413): prog-id=86 op=UNLOAD [ 62.034283] audit: type=1334 audit(1768437672.250:414): prog-id=123 op=LOAD [ 62.035401] audit: type=1334 audit(1768437672.250:415): prog-id=76 op=UNLOAD [ 62.038285] audit: type=1334 audit(1768437672.253:416): prog-id=124 op=LOAD [ 67.227767] kauditd_printk_skb: 37 callbacks suppressed [ 67.227770] audit: type=1106 audit(1768437677.454:454): pid=2356 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 67.232722] audit: type=1104 audit(1768437677.454:455): pid=2356 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 67.308397] audit: type=1106 audit(1768437677.535:456): pid=2352 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 67.314726] audit: type=1104 audit(1768437677.535:457): pid=2352 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 67.319057] audit: type=1131 audit(1768437677.538:458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.124:22-20.161.92.111:43562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.478098] audit: type=1334 audit(1768437679.704:459): prog-id=140 op=LOAD [ 69.480524] audit: type=1334 audit(1768437679.707:460): prog-id=141 op=LOAD [ 69.481992] audit: type=1300 audit(1768437679.707:460): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000178238 a2=98 a3=0 items=0 ppid=3496 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 69.487231] audit: type=1327 audit(1768437679.707:460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466316166343933353032626236323036636332663365363539663634 [ 69.492808] audit: type=1334 audit(1768437679.708:461): prog-id=141 op=UNLOAD [ 77.082360] kauditd_printk_skb: 229 callbacks suppressed [ 77.082364] audit: type=1334 audit(1768437687.309:539): prog-id=158 op=LOAD [ 77.085947] audit: type=1334 audit(1768437687.312:540): prog-id=159 op=LOAD [ 77.087675] audit: type=1300 audit(1768437687.312:540): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000138238 a2=98 a3=0 items=0 ppid=3522 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.093066] audit: type=1327 audit(1768437687.312:540): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637346534643931663131653530366261656332663633616533303964 [ 77.099108] audit: type=1334 audit(1768437687.312:541): prog-id=159 op=UNLOAD [ 77.101179] audit: type=1300 audit(1768437687.312:541): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3522 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.110188] audit: type=1327 audit(1768437687.312:541): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637346534643931663131653530366261656332663633616533303964 [ 77.115811] audit: type=1334 audit(1768437687.312:542): prog-id=160 op=LOAD [ 77.117531] audit: type=1300 audit(1768437687.312:542): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000138488 a2=98 a3=0 items=0 ppid=3522 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.123756] audit: type=1327 audit(1768437687.312:542): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637346534643931663131653530366261656332663633616533303964 [ 86.436932] kauditd_printk_skb: 122 callbacks suppressed [ 86.436936] audit: type=1334 audit(1768437696.663:591): prog-id=186 op=LOAD [ 86.439603] audit: type=1300 audit(1768437696.663:591): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe215af570 a2=74 a3=7ffe215af570 items=0 ppid=4040 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 86.444933] audit: type=1327 audit(1768437696.663:591): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 86.446797] audit: type=1334 audit(1768437696.663:592): prog-id=186 op=UNLOAD [ 86.447916] audit: type=1300 audit(1768437696.663:592): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=7ffe215af570 a2=74 a3=7ffe215af570 items=0 ppid=4040 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 86.453123] audit: type=1327 audit(1768437696.663:592): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 86.455015] audit: type=1334 audit(1768437696.664:593): prog-id=187 op=LOAD [ 86.456151] audit: type=1300 audit(1768437696.664:593): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe215ae5f0 a2=90 a3=2 items=0 ppid=4040 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/local/bin/bpftool" subj=system_u:system_r:spc_t:s0 key=(null) [ 86.461281] audit: type=1327 audit(1768437696.664:593): proctitle=627066746F6F6C002D6A00666561747572650070726F6265 [ 86.463157] audit: type=1334 audit(1768437696.664:594): prog-id=187 op=UNLOAD This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:40 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:40 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:41 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:41 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:42 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:42 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 94.374170] NET: Registered PF_ALG protocol family [ 94.379383] kauditd_printk_skb: 5660 callbacks suppressed [ 94.379386] audit: type=1334 audit(1768437704.605:2481): prog-id=1131 op=LOAD [ 94.383285] audit: type=1300 audit(1768437704.605:2481): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdd5ae6c30 a2=74 a3=7ffdd5ae6c30 items=0 ppid=4170 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.388576] audit: type=1327 audit(1768437704.605:2481): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 94.392325] audit: type=1334 audit(1768437704.606:2482): prog-id=1131 op=UNLOAD [ 94.393794] audit: type=1300 audit(1768437704.606:2482): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffdd5ae6c30 a2=74 a3=7ffdd5ae6c30 items=0 ppid=4170 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.398775] audit: type=1327 audit(1768437704.606:2482): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 94.402915] audit: type=1334 audit(1768437704.606:2483): prog-id=1132 op=LOAD [ 94.404305] audit: type=1300 audit(1768437704.606:2483): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffdd5ae6bc0 a2=80 a3=0 items=0 ppid=4170 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 94.409575] audit: type=1327 audit(1768437704.606:2483): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F76786C616E00696E6772657373007072696F00310068616E646C65003100627066006461006F626A006270665F6F7665726C61792E6F007365630066726F6D2D6F7665726C6179 [ 94.413596] audit: type=1334 audit(1768437704.606:2484): prog-id=1132 op=UNLOAD [ 96.226816] eth0: renamed from tmpbdc31 [ 96.237073] eth0: renamed from tmpb4c11 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:48 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:48 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:49 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:41:49 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 100.313851] kauditd_printk_skb: 323 callbacks suppressed [ 100.313855] audit: type=1334 audit(1768437710.540:2592): prog-id=1169 op=LOAD [ 100.317170] audit: type=1334 audit(1768437710.540:2593): prog-id=1170 op=LOAD [ 100.318564] audit: type=1300 audit(1768437710.540:2593): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffce82142d0 a2=74 a3=7ffce82142d0 items=0 ppid=4040 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.324919] audit: type=1327 audit(1768437710.540:2593): proctitle=74630066696C746572007265706C61636500646576006C786333343334666236383938333800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003538335F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 100.328988] audit: type=1334 audit(1768437710.540:2594): prog-id=1170 op=UNLOAD [ 100.330160] audit: type=1300 audit(1768437710.540:2594): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffce82142d0 a2=74 a3=7ffce82142d0 items=0 ppid=4040 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.335334] audit: type=1327 audit(1768437710.540:2594): proctitle=74630066696C746572007265706C61636500646576006C786333343334666236383938333800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003538335F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 100.339417] audit: type=1334 audit(1768437710.540:2595): prog-id=1171 op=LOAD [ 100.340705] audit: type=1300 audit(1768437710.540:2595): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffce8214260 a2=80 a3=0 items=0 ppid=4040 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 100.345741] audit: type=1327 audit(1768437710.540:2595): proctitle=74630066696C746572007265706C61636500646576006C786333343334666236383938333800696E6772657373007072696F00310068616E646C65003100627066006461006F626A003538335F6E6578742F6270665F6C78632E6F007365630066726F6D2D636F6E7461696E6572 [ 121.821463] kauditd_printk_skb: 468 callbacks suppressed [ 121.821466] audit: type=1130 audit(1768437732.047:2754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.124:22-20.161.92.111:59514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 122.308937] audit: type=1101 audit(1768437732.535:2755): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 122.314089] audit: type=1103 audit(1768437732.536:2756): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 122.319153] audit: type=1006 audit(1768437732.536:2757): pid=4708 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 122.322449] audit: type=1300 audit(1768437732.536:2757): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2a24cf80 a2=3 a3=0 items=0 ppid=1 pid=4708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.327723] audit: type=1327 audit(1768437732.536:2757): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 122.335139] audit: type=1105 audit(1768437732.561:2758): pid=4708 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 122.341654] audit: type=1103 audit(1768437732.564:2759): pid=4711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 123.240125] audit: type=1106 audit(1768437733.466:2760): pid=4708 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 123.249105] audit: type=1104 audit(1768437733.466:2761): pid=4708 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 128.329977] kauditd_printk_skb: 1 callbacks suppressed [ 128.329980] audit: type=1130 audit(1768437738.556:2763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.124:22-20.161.92.111:33906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 128.789410] audit: type=1101 audit(1768437739.016:2764): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 128.794921] audit: type=1103 audit(1768437739.017:2765): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 128.799865] audit: type=1006 audit(1768437739.017:2766): pid=4727 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 128.802631] audit: type=1300 audit(1768437739.017:2766): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff89ee9790 a2=3 a3=0 items=0 ppid=1 pid=4727 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.807882] audit: type=1327 audit(1768437739.017:2766): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 128.814629] audit: type=1105 audit(1768437739.041:2767): pid=4727 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 128.821020] audit: type=1103 audit(1768437739.047:2768): pid=4730 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 129.119529] audit: type=1106 audit(1768437739.346:2769): pid=4727 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 129.126202] audit: type=1104 audit(1768437739.346:2770): pid=4727 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.200667] kauditd_printk_skb: 1 callbacks suppressed [ 134.200670] audit: type=1130 audit(1768437744.427:2772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.124:22-20.161.92.111:58452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 134.623976] audit: type=1101 audit(1768437744.850:2773): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.629313] audit: type=1103 audit(1768437744.852:2774): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.634225] audit: type=1006 audit(1768437744.852:2775): pid=4746 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 134.636989] audit: type=1300 audit(1768437744.852:2775): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff88b57de0 a2=3 a3=0 items=0 ppid=1 pid=4746 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.642139] audit: type=1327 audit(1768437744.852:2775): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 134.648409] audit: type=1105 audit(1768437744.875:2776): pid=4746 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.654139] audit: type=1103 audit(1768437744.876:2777): pid=4749 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.916969] audit: type=1106 audit(1768437745.143:2778): pid=4746 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 134.923514] audit: type=1104 audit(1768437745.143:2779): pid=4746 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.003414] kauditd_printk_skb: 1 callbacks suppressed [ 140.003418] audit: type=1130 audit(1768437750.229:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.124:22-20.161.92.111:58456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 140.434841] audit: type=1101 audit(1768437750.661:2782): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.440162] audit: type=1103 audit(1768437750.663:2783): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.445652] audit: type=1006 audit(1768437750.663:2784): pid=4763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 140.448649] audit: type=1300 audit(1768437750.663:2784): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffda991dae0 a2=3 a3=0 items=0 ppid=1 pid=4763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.453909] audit: type=1327 audit(1768437750.663:2784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 140.460330] audit: type=1105 audit(1768437750.687:2785): pid=4763 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.466059] audit: type=1103 audit(1768437750.689:2786): pid=4766 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.740166] audit: type=1106 audit(1768437750.966:2787): pid=4763 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 140.745933] audit: type=1104 audit(1768437750.967:2788): pid=4763 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 147.674722] kauditd_printk_skb: 23 callbacks suppressed [ 147.674725] audit: type=1130 audit(1768437757.901:2808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.124:22-20.161.92.111:42404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 148.096281] audit: type=1101 audit(1768437758.322:2809): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.102357] audit: type=1103 audit(1768437758.324:2810): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.107950] audit: type=1006 audit(1768437758.324:2811): pid=4809 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 148.111938] audit: type=1300 audit(1768437758.324:2811): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf5a43940 a2=3 a3=0 items=0 ppid=1 pid=4809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.117987] audit: type=1327 audit(1768437758.324:2811): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 148.125490] audit: type=1105 audit(1768437758.352:2812): pid=4809 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.132035] audit: type=1103 audit(1768437758.355:2813): pid=4812 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.403012] audit: type=1106 audit(1768437758.629:2814): pid=4809 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 148.409184] audit: type=1104 audit(1768437758.629:2815): pid=4809 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 153.500322] kauditd_printk_skb: 1 callbacks suppressed [ 153.500325] audit: type=1130 audit(1768437763.726:2817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.124:22-20.161.92.111:54510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.932152] audit: type=1101 audit(1768437764.158:2818): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 153.937490] audit: type=1103 audit(1768437764.161:2819): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 153.942354] audit: type=1006 audit(1768437764.161:2820): pid=4824 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 153.945070] audit: type=1300 audit(1768437764.161:2820): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc1ec216a0 a2=3 a3=0 items=0 ppid=1 pid=4824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.950240] audit: type=1327 audit(1768437764.161:2820): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 153.975490] audit: type=1105 audit(1768437764.202:2821): pid=4824 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 153.981754] audit: type=1103 audit(1768437764.208:2822): pid=4827 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 154.248552] audit: type=1106 audit(1768437764.474:2823): pid=4824 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 154.254940] audit: type=1104 audit(1768437764.474:2824): pid=4824 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 158.762217] kauditd_printk_skb: 54 callbacks suppressed [ 158.762221] audit: type=1106 audit(1768437768.988:2863): pid=4886 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 158.770705] audit: type=1104 audit(1768437768.988:2864): pid=4886 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 158.776087] audit: type=1131 audit(1768437768.992:2865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.124:22-20.161.92.111:54538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.407370] audit: type=1325 audit(1768437772.633:2866): table=filter:161 family=2 entries=20 op=nft_register_rule pid=4903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.410416] audit: type=1300 audit(1768437772.633:2866): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe7a44e770 a2=0 a3=7ffe7a44e75c items=0 ppid=3591 pid=4903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.416467] audit: type=1327 audit(1768437772.633:2866): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 162.419190] audit: type=1325 audit(1768437772.639:2867): table=nat:162 family=2 entries=102 op=nft_register_chain pid=4903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.422152] audit: type=1300 audit(1768437772.639:2867): arch=c000003e syscall=46 success=yes exit=47916 a0=3 a1=7ffe7a44e770 a2=0 a3=7ffe7a44e75c items=0 ppid=3591 pid=4903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.427906] audit: type=1327 audit(1768437772.639:2867): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 163.847660] audit: type=1130 audit(1768437774.073:2868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.124:22-20.161.92.111:54340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.280074] audit: type=1101 audit(1768437774.506:2869): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.285470] audit: type=1103 audit(1768437774.508:2870): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.290501] audit: type=1006 audit(1768437774.508:2871): pid=4905 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 164.293319] audit: type=1300 audit(1768437774.508:2871): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff6a7cac50 a2=3 a3=0 items=0 ppid=1 pid=4905 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.298523] audit: type=1327 audit(1768437774.508:2871): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.304576] audit: type=1105 audit(1768437774.531:2872): pid=4905 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.310301] audit: type=1103 audit(1768437774.535:2873): pid=4908 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.578518] audit: type=1106 audit(1768437774.805:2874): pid=4905 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 164.584469] audit: type=1104 audit(1768437774.805:2875): pid=4905 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 169.665023] kauditd_printk_skb: 1 callbacks suppressed [ 169.665025] audit: type=1130 audit(1768437779.891:2877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.124:22-20.161.92.111:54348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.128400] audit: type=1101 audit(1768437780.355:2878): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.134393] audit: type=1103 audit(1768437780.357:2879): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.140215] audit: type=1006 audit(1768437780.357:2880): pid=4920 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 170.143589] audit: type=1300 audit(1768437780.357:2880): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff3089bc30 a2=3 a3=0 items=0 ppid=1 pid=4920 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.149708] audit: type=1327 audit(1768437780.357:2880): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.155707] audit: type=1105 audit(1768437780.382:2881): pid=4920 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.162174] audit: type=1103 audit(1768437780.385:2882): pid=4923 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.436488] audit: type=1106 audit(1768437780.663:2883): pid=4920 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 170.444220] audit: type=1104 audit(1768437780.663:2884): pid=4920 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.523998] kauditd_printk_skb: 1 callbacks suppressed [ 175.524001] audit: type=1130 audit(1768437785.750:2886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.124:22-20.161.92.111:51946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.945601] audit: type=1101 audit(1768437786.172:2887): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.951968] audit: type=1103 audit(1768437786.178:2888): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.957484] audit: type=1006 audit(1768437786.178:2889): pid=4936 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 175.960479] audit: type=1300 audit(1768437786.178:2889): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff52361d40 a2=3 a3=0 items=0 ppid=1 pid=4936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.965968] audit: type=1327 audit(1768437786.178:2889): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.983553] audit: type=1105 audit(1768437786.210:2890): pid=4936 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 175.990005] audit: type=1103 audit(1768437786.215:2891): pid=4939 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.235786] audit: type=1106 audit(1768437786.462:2892): pid=4936 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 176.241551] audit: type=1104 audit(1768437786.464:2893): pid=4936 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:43:10 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:43:10 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 181.116206] kauditd_printk_skb: 17 callbacks suppressed [ 181.116210] audit: type=1106 audit(1768437791.342:2909): pid=4951 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 181.123398] audit: type=1104 audit(1768437791.343:2910): pid=4951 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 181.127868] audit: type=1131 audit(1768437791.345:2911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.124:22-20.161.92.111:51952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.201236] audit: type=1130 audit(1768437791.427:2912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.124:22-20.161.92.111:51954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.652213] audit: type=1101 audit(1768437791.878:2913): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 181.657937] audit: type=1103 audit(1768437791.880:2914): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 181.662789] audit: type=1006 audit(1768437791.880:2915): pid=5100 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 181.665672] audit: type=1300 audit(1768437791.880:2915): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffff49d4720 a2=3 a3=0 items=0 ppid=1 pid=5100 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.671146] audit: type=1327 audit(1768437791.880:2915): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 181.681569] audit: type=1105 audit(1768437791.908:2916): pid=5100 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 187.118134] kauditd_printk_skb: 133 callbacks suppressed [ 187.118138] audit: type=1334 audit(1768437797.344:2980): prog-id=1290 op=LOAD [ 187.120924] audit: type=1334 audit(1768437797.346:2981): prog-id=1291 op=LOAD [ 187.122326] audit: type=1300 audit(1768437797.346:2981): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178238 a2=98 a3=0 items=0 ppid=5133 pid=5360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.128803] audit: type=1327 audit(1768437797.346:2981): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161653035353530643761386530626266323161373631333434656639 [ 187.137168] audit: type=1334 audit(1768437797.346:2982): prog-id=1291 op=UNLOAD [ 187.138845] audit: type=1300 audit(1768437797.346:2982): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5133 pid=5360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.145526] audit: type=1327 audit(1768437797.346:2982): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161653035353530643761386530626266323161373631333434656639 [ 187.152508] audit: type=1334 audit(1768437797.346:2983): prog-id=1292 op=LOAD [ 187.154049] audit: type=1300 audit(1768437797.346:2983): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000178488 a2=98 a3=0 items=0 ppid=5133 pid=5360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.159944] audit: type=1327 audit(1768437797.346:2983): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161653035353530643761386530626266323161373631333434656639 [ 188.239665] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106-gcm-aesni-avx)) [ 193.298431] kauditd_printk_skb: 6126 callbacks suppressed [ 193.298435] audit: type=1334 audit(1768437803.525:5032): prog-id=2254 op=LOAD [ 193.307343] audit: type=1300 audit(1768437803.525:5032): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc550e60b0 a2=74 a3=7ffc550e60b0 items=0 ppid=5373 pid=5946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 193.316030] audit: type=1327 audit(1768437803.525:5032): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333537335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 193.323076] audit: type=1334 audit(1768437803.540:5033): prog-id=2254 op=UNLOAD [ 193.325462] audit: type=1300 audit(1768437803.540:5033): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffc550e60b0 a2=74 a3=7ffc550e60b0 items=0 ppid=5373 pid=5946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 193.331553] audit: type=1327 audit(1768437803.540:5033): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333537335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 193.336423] audit: type=1334 audit(1768437803.540:5034): prog-id=2255 op=LOAD [ 193.338987] audit: type=1300 audit(1768437803.540:5034): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffc550e6040 a2=80 a3=0 items=0 ppid=5373 pid=5946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tc" exe="/usr/local/bin/tc" subj=system_u:system_r:spc_t:s0 key=(null) [ 193.348767] audit: type=1327 audit(1768437803.540:5034): proctitle=74630066696C746572007265706C616365006465760063696C69756D5F686F737400696E6772657373007072696F00310068616E646C65003100627066006461006F626A00333537335F6E6578742F6270665F686F73742E6F0073656300746F2D686F7374 [ 193.355400] audit: type=1334 audit(1768437803.540:5035): prog-id=2255 op=UNLOAD This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:43:24 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 This is ip-172-31-20-124 (Linux x86_64 6.12.65-flatcar) 00:43:24 SSH host key: SHA256:kka0gUuD/rTZJHW7O1FzW1rM64ahkeGKodn3xvh4Y7o (ECDSA) SSH host key: SHA256:2+UAeWqDdMpijTlmjRLpEml3dDVOO2tm6GwYWJiqwaU (RSA) SSH host key: SHA256:g6HNeokO5yqP896cqrxhMKB3d5YCFF5jdDLS/daKuE8 (ED25519) eth0: 172.31.20.124 fe80::449:b9ff:fe89:1b17 ip-172-31-20-124 login: [ 200.489014] kauditd_printk_skb: 558 callbacks suppressed [ 200.489017] audit: type=1106 audit(1768437810.715:5226): pid=5222 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.496047] audit: type=1104 audit(1768437810.716:5227): pid=5222 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 200.501067] audit: type=1131 audit(1768437810.720:5228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.124:22-20.161.92.111:42346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.615989] audit: type=1106 audit(1768437814.842:5229): pid=2171 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 204.622869] audit: type=1104 audit(1768437814.842:5230): pid=2171 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.161.92.111 addr=20.161.92.111 terminal=ssh res=success' [ 204.627317] audit: type=1131 audit(1768437814.844:5231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-172.31.20.124:22-20.161.92.111:50960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.690347] audit: type=1334 audit(1768437814.917:5232): prog-id=2339 op=UNLOAD [ 204.690350] audit: type=1334 audit(1768437814.917:5233): prog-id=2355 op=UNLOAD [ 204.731990] audit: type=1131 audit(1768437814.958:5234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.739161] audit: type=1131 audit(1768437814.965:5235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'