type=CRYPTO_KEY_USER msg=audit(1765013684.023:56627): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445583 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013684.087:56628): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013684.087:56629): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79757869726E7665676779766268786571747477636C7965716F66776D717863203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333638332E363334303133342D313730332D3136383138393232373130333338372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013684.088:56630): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013684.090:56631): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013684.311:56632): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013684.311:56633): pid=445599 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013684.315:56634): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013684.315:56635): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013684.335:56636): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013684.335:56637): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013684.337:56638): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445602 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013684.394:56639): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013684.394:56640): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013684.411:56641): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013684.411:56642): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013684.413:56643): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013684.445:56644): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013684.445:56645): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013684.468:56646): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013684.469:56647): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013684.471:56648): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013684.533:56649): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013684.533:56650): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79657A6A777362627361626D76666173636A6B6B777561616B68677A68776B76203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333638332E363334303133342D313730332D3136383138393232373130333338372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013684.534:56651): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013684.535:56652): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_LOGIN msg=audit(1765013685.146:56653): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013685.146:56654): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765013685.179:56655): prog-id=2291 op=LOAD
type=BPF msg=audit(1765013685.179:56656): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.179:56657): prog-id=2292 op=LOAD
type=BPF msg=audit(1765013685.179:56658): prog-id=2293 op=LOAD
type=BPF msg=audit(1765013685.179:56659): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.179:56660): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.180:56661): prog-id=2294 op=LOAD
type=BPF msg=audit(1765013685.180:56662): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.185:56663): prog-id=2295 op=LOAD
type=BPF msg=audit(1765013685.185:56664): prog-id=2296 op=LOAD
type=BPF msg=audit(1765013685.185:56665): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.185:56666): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.197:56667): prog-id=2297 op=LOAD
type=BPF msg=audit(1765013685.197:56668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.200:56669): prog-id=2298 op=LOAD
type=BPF msg=audit(1765013685.200:56670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.200:56671): prog-id=2299 op=LOAD
type=BPF msg=audit(1765013685.200:56672): prog-id=2300 op=LOAD
type=BPF msg=audit(1765013685.200:56673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013685.200:56674): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765013685.217:56675): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013685.217:56676): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013685.219:56677): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013685.224:56678): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013685.228:56679): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013685.229:56680): pid=445684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013685.234:56681): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013685.234:56682): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765013685.242:56683): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013685.243:56684): pid=445645 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013685.246:56685): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013685.247:56686): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013685.389:56687): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013685.390:56688): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013685.392:56689): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013685.453:56690): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013685.453:56691): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013685.465:56692): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013685.465:56693): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013685.467:56694): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013685.502:56695): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013685.502:56696): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013685.518:56697): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013685.518:56698): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013685.520:56699): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013685.586:56700): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013685.586:56701): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6678637A7A66786E6B656F73706B6D666A6B7875617661766C6676636C67203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333638332E363334303133342D313730332D3136383138393232373130333338372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013685.587:56702): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013685.590:56703): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765013686.250:56704): prog-id=2301 op=LOAD
type=BPF msg=audit(1765013686.251:56705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.251:56706): prog-id=2302 op=LOAD
type=BPF msg=audit(1765013686.251:56707): prog-id=2303 op=LOAD
type=BPF msg=audit(1765013686.251:56708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.251:56709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.253:56710): prog-id=2304 op=LOAD
type=BPF msg=audit(1765013686.253:56711): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.260:56712): prog-id=2305 op=LOAD
type=BPF msg=audit(1765013686.260:56713): prog-id=2306 op=LOAD
type=BPF msg=audit(1765013686.260:56714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.260:56715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.270:56716): prog-id=2307 op=LOAD
type=BPF msg=audit(1765013686.270:56717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.274:56718): prog-id=2308 op=LOAD
type=BPF msg=audit(1765013686.274:56719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.274:56720): prog-id=2309 op=LOAD
type=BPF msg=audit(1765013686.274:56721): prog-id=2310 op=LOAD
type=BPF msg=audit(1765013686.274:56722): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.274:56723): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.440:56724): prog-id=2311 op=LOAD
type=SYSCALL msg=audit(1765013686.440:56724): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffeddb34f40 a2=90 a3=9500000001 items=0 ppid=445800 pid=445801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013686.440:56724): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646233633138663133666334373138633838613136323030346130386536
type=USER_ACCT msg=audit(1765013686.505:56725): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765013686.505:56726): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765013686.506:56727): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013686.508:56728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013686.550:56729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013686.590:56730): pid=445826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765013686.590:56731): pid=445826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765013686.590:56732): pid=445826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765013686.591:56733): pid=445826 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=246 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1765013686.591:56733): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe34f5ff60 a2=1 a3=0 items=0 ppid=1 pid=445826 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013686.591:56733): proctitle="(systemd)"
type=USER_START msg=audit(1765013686.593:56734): pid=445826 uid=0 auid=0 ses=246 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1765013686.614:56735): prog-id=2312 op=LOAD
type=SYSCALL msg=audit(1765013686.614:56735): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5e1067f0 a2=90 a3=0 items=0 ppid=1 pid=445826 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013686.614:56735): proctitle="(systemd)"
type=BPF msg=audit(1765013686.615:56736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013686.615:56737): prog-id=2313 op=LOAD
type=SYSCALL msg=audit(1765013686.615:56737): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5e106890 a2=90 a3=4 items=0 ppid=1 pid=445826 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013686.615:56737): proctitle="(systemd)"
type=BPF msg=audit(1765013686.615:56738): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765013686.657:56739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013686.742:56740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765013686.768:56741): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013686.836:56742): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765013686.837:56743): pid=445806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013686.850:56744): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765013686.851:56745): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765013686.851:56746): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765013687.125:56747): prog-id=2314 op=LOAD
type=BPF msg=audit(1765013687.125:56748): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.126:56749): prog-id=2315 op=LOAD
type=BPF msg=audit(1765013687.126:56750): prog-id=2316 op=LOAD
type=BPF msg=audit(1765013687.126:56751): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.126:56752): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.127:56753): prog-id=2317 op=LOAD
type=BPF msg=audit(1765013687.127:56754): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.132:56755): prog-id=2318 op=LOAD
type=BPF msg=audit(1765013687.132:56756): prog-id=2319 op=LOAD
type=BPF msg=audit(1765013687.132:56757): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.132:56758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.139:56759): prog-id=2320 op=LOAD
type=BPF msg=audit(1765013687.139:56760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.142:56761): prog-id=2321 op=LOAD
type=BPF msg=audit(1765013687.142:56762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.142:56763): prog-id=2322 op=LOAD
type=BPF msg=audit(1765013687.142:56764): prog-id=2323 op=LOAD
type=BPF msg=audit(1765013687.142:56765): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013687.142:56766): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765013687.151:56767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765013687.172:56768): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013687.179:56769): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765013687.179:56770): pid=445865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013687.190:56771): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013687.190:56772): pid=445742 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013687.233:56773): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013687.233:56774): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013687.795:56775): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013687.795:56776): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013687.797:56777): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013687.830:56778): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013687.830:56779): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.431:56780): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.431:56781): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.432:56782): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445921 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013688.460:56783): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013688.460:56784): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.471:56785): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.471:56786): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.472:56787): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013688.506:56788): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013688.506:56789): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.549:56790): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.549:56791): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.551:56792): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013688.594:56793): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013688.594:56794): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.610:56795): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.610:56796): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.612:56797): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013688.647:56798): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013688.647:56799): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.663:56800): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.663:56801): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.665:56802): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=445980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013688.733:56803): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013688.733:56804): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F717665617470657777646E796A7077737A6C62716C626C6C646579796B7561203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333638382E343637383331392D313738372D31313937333139303238363934322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013688.734:56805): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013688.739:56806): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013688.962:56807): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013688.962:56808): pid=445996 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013688.967:56809): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013688.967:56810): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013688.983:56811): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013688.983:56812): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013688.984:56813): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446000 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013689.013:56814): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013689.013:56815): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013689.179:56816): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013689.179:56817): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013689.181:56818): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446014 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013689.211:56819): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013689.211:56820): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013689.222:56821): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013689.223:56822): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013689.224:56823): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013689.260:56824): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013689.260:56825): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013689.285:56826): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013689.285:56827): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013689.287:56828): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013689.336:56829): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013689.336:56830): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013689.798:56831): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013689.799:56832): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013689.801:56833): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013689.833:56834): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013689.833:56835): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013689.854:56836): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013689.854:56837): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013689.856:56838): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013689.922:56839): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013689.923:56840): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B65637266726A6B676276757A697A6362766B63776267776768777469776C6B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333638392E323138383630342D313831312D3138353331343237333235383934302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013689.923:56841): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013689.927:56842): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013690.157:56843): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013690.157:56844): pid=446089 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013690.160:56845): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.161:56846): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.183:56847): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.183:56848): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.184:56849): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013690.210:56850): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.210:56851): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.651:56852): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.651:56853): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.653:56854): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013690.682:56855): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.682:56856): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.698:56857): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.698:56858): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.699:56859): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013690.736:56860): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.736:56861): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.769:56862): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.769:56863): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.770:56864): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013690.819:56865): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.819:56866): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.831:56867): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.831:56868): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.833:56869): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013690.863:56870): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013690.863:56871): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013690.878:56872): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013690.879:56873): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013690.880:56874): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013690.947:56875): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013690.947:56876): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746B75726F64636F7168617A76636B6762747079777174687A70777269767976203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333639302E3639343738382D313835302D3137353032383336343938303534352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013690.949:56877): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013690.954:56878): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013691.236:56879): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013691.236:56880): pid=446184 uid=1000 auid=1000 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013691.239:56881): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013691.239:56882): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013691.252:56883): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013691.252:56884): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013691.253:56885): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013691.273:56886): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013691.273:56887): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013691.802:56888): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=438487 suid=1000 rport=52612 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013691.803:56889): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=438487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013691.806:56890): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765013691.807:56891): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013691.808:56892): pid=438484 uid=0 auid=1000 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=438484 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765013693.713:56893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013693.717:56894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013693.722:56895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013693.726:56896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013694.000:56897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013694.082:56898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013694.186:56899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013694.275:56900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013696.964:56901): pid=446318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765013697.071:56902): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=446318 suid=74 rport=47210 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765013697.071:56903): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=446318 suid=74 rport=47210 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765013697.213:56904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013697.243:56905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013697.423:56906): pid=446321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765013697.424:56907): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=446321 suid=74 rport=57214 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765013697.424:56908): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=446321 suid=74 rport=57214 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765013697.513:56909): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013697.513:56910): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013697.543:56911): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013697.544:56912): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=446321 suid=74 rport=57214 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765013697.546:56913): pid=446320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765013697.546:56914): pid=446320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=247 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765013697.546:56914): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffda6658e80 a2=4 a3=3e8 items=0 ppid=409081 pid=446320 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=247 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013697.546:56914): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765013697.548:56915): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765013697.585:56916): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013697.587:56917): pid=446323 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765013697.588:56918): pid=446323 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765013697.634:56919): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013697.634:56920): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013697.637:56921): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013697.671:56922): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013697.671:56923): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013697.683:56924): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013697.683:56925): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013697.684:56926): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013697.707:56927): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=446318 suid=74 rport=47210 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765013697.707:56928): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446318 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765013697.708:56929): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.7 addr=193.46.255.7 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013697.709:56930): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765013697.709:56931): pid=446317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765013697.722:56932): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013697.722:56933): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013698.045:56934): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013698.045:56935): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013698.046:56936): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013698.078:56937): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013698.078:56938): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013698.104:56939): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013698.105:56940): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013698.106:56941): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013698.163:56942): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013698.163:56943): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013698.175:56944): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013698.175:56945): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013698.176:56946): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013698.207:56947): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013698.207:56948): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013698.220:56949): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013698.220:56950): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013698.222:56951): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013698.919:56952): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013698.919:56953): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013698.930:56954): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013698.930:56955): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013698.932:56956): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013698.966:56957): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013698.966:56958): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013699.159:56959): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013699.159:56960): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013699.161:56961): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013699.188:56962): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013699.189:56963): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765013699.714:56964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013699.963:56965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013700.209:56966): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.209:56967): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.210:56968): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.246:56969): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.246:56970): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.270:56971): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.270:56972): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.272:56973): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.318:56974): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.318:56975): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.333:56976): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.333:56977): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.335:56978): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.362:56979): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.362:56980): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.376:56981): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.376:56982): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.377:56983): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013700.440:56984): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013700.440:56985): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A6E65696C626E6B747464696A726778637478686E7A66666774646D776E6A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333639392E313935373937322D36322D32383133363639303439363333392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013700.441:56986): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013700.446:56987): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013700.665:56988): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013700.666:56989): pid=446538 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013700.670:56990): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.670:56991): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.681:56992): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.682:56993): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.683:56994): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.709:56995): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.709:56996): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.735:56997): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.735:56998): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.737:56999): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.765:57000): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.765:57001): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.781:57002): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.781:57003): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.783:57004): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.816:57005): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.816:57006): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.836:57007): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.837:57008): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.838:57009): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.887:57010): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.887:57011): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.900:57012): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.900:57013): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.901:57014): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013700.932:57015): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013700.932:57016): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013700.948:57017): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013700.948:57018): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013700.949:57019): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446614 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013701.014:57020): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013701.014:57021): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A656567656A75647A6972636A617678676F6268756E756867656B74746968203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730302E373735373634372D36322D3139343834383835313633323732392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013701.015:57022): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013701.017:57023): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013701.244:57024): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013701.244:57025): pid=446630 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013701.248:57026): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013701.248:57027): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.003:57028): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.003:57029): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.004:57030): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.036:57031): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.036:57032): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.085:57033): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.085:57034): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.086:57035): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.114:57036): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.114:57037): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.130:57038): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.130:57039): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.131:57040): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.166:57041): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.166:57042): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.189:57043): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.189:57044): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.191:57045): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.241:57046): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.241:57047): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.255:57048): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.255:57049): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.256:57050): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.288:57051): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.288:57052): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.310:57053): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.310:57054): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.312:57055): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013702.374:57056): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013702.374:57057): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A717A6565636379786261676E706A687277767761686E736E7963646D667266203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730322E313232353833362D36322D34383036333937333239303033392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013702.375:57058): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013702.393:57059): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765013702.396:57060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013702.615:57061): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013702.615:57062): pid=446722 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013702.619:57063): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.619:57064): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.636:57065): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.636:57066): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.637:57067): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446750 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.656:57068): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.657:57069): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.691:57070): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.691:57071): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.693:57072): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.718:57073): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.718:57074): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.730:57075): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.730:57076): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.731:57077): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765013702.756:57078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013702.762:57079): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.763:57080): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.785:57081): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.786:57082): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.787:57083): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446799 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.831:57084): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.831:57085): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.844:57086): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.844:57087): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.846:57088): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013702.875:57089): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013702.875:57090): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013702.890:57091): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013702.890:57092): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013702.892:57093): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013702.954:57094): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013702.954:57095): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7265616E6572676C66686C706E7A796A696664747A777661776D656473797961203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730322E373235343339352D36322D3236353839333734363836323231332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013702.955:57096): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013702.958:57097): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013703.174:57098): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013703.175:57099): pid=446842 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013703.178:57100): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.178:57101): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.190:57102): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.190:57103): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.191:57104): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.220:57105): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.221:57106): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.247:57107): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.247:57108): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.249:57109): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.279:57110): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.279:57111): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.290:57112): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.290:57113): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.292:57114): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446872 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.328:57115): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.328:57116): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.355:57117): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.355:57118): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.357:57119): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446891 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.402:57120): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.402:57121): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.422:57122): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.422:57123): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.424:57124): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.453:57125): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.453:57126): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.467:57127): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.467:57128): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.469:57129): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013703.532:57130): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013703.532:57131): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A75786D736E667473686478636F736F6C747379796673747070797A6B676C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730332E323836353332322D36322D3233313731323737353037343930352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013703.533:57132): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013703.537:57133): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013703.774:57134): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013703.774:57135): pid=446934 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013703.778:57136): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.778:57137): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.810:57138): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.811:57139): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.812:57140): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.833:57141): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.833:57142): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.891:57143): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.891:57144): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.893:57145): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.914:57146): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.914:57147): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.933:57148): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.933:57149): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013703.934:57150): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013703.960:57151): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013703.960:57152): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013703.993:57153): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013703.993:57154): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.002:57155): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.052:57156): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.052:57157): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.064:57158): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.064:57159): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.066:57160): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.088:57161): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.088:57162): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.109:57163): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.109:57164): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.110:57165): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.464:57166): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.464:57167): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.496:57168): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.497:57169): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.498:57170): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.526:57171): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.526:57172): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.607:57173): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.608:57174): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.609:57175): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.635:57176): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.635:57177): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.648:57178): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.648:57179): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.649:57180): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.683:57181): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.684:57182): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.902:57183): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.902:57184): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.903:57185): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013704.947:57186): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013704.948:57187): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013704.973:57188): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013704.973:57189): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013704.975:57190): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013705.001:57191): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.001:57192): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.016:57193): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.016:57194): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.018:57195): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013705.064:57196): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013705.065:57197): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67706A6A62636F7776727A677A707A676A67737A6968667371746F71656B6264203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730342E3634323938332D3139342D3236363038323331323839383737312F416E736962616C6C5A5F7365626F6F6C65616E2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013705.065:57198): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013705.068:57199): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013705.418:57200): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013705.418:57201): pid=447116 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013705.422:57202): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.422:57203): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.440:57204): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.440:57205): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.441:57206): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447120 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013705.472:57207): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.472:57208): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.598:57209): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.599:57210): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.600:57211): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013705.626:57212): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.627:57213): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.640:57214): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.640:57215): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.642:57216): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013705.675:57217): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.675:57218): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.888:57219): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.888:57220): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.890:57221): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013705.946:57222): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013705.947:57223): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013705.970:57224): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013705.970:57225): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013705.971:57226): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.261:57227): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.261:57228): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.276:57229): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.276:57230): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.278:57231): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447193 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.473:57232): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.473:57233): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.496:57234): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.496:57235): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.497:57236): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.527:57237): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.527:57238): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.550:57239): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.551:57240): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.552:57241): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.580:57242): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.580:57243): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.606:57244): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.607:57245): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.608:57246): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.662:57247): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.663:57248): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.680:57249): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.680:57250): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.681:57251): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.704:57252): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.704:57253): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.716:57254): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.716:57255): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.717:57256): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.954:57257): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.954:57258): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013706.969:57259): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013706.969:57260): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013706.970:57261): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013706.996:57262): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013706.996:57263): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.042:57264): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.042:57265): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.043:57266): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.068:57267): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.068:57268): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.083:57269): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.083:57270): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.085:57271): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.121:57272): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.121:57273): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.162:57274): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.162:57275): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.163:57276): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.212:57277): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.212:57278): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.224:57279): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.224:57280): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.225:57281): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.260:57282): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.260:57283): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.272:57284): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.273:57285): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.274:57286): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.526:57287): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.526:57288): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.554:57289): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.554:57290): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.555:57291): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.594:57292): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.594:57293): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.609:57294): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.610:57295): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.611:57296): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.641:57297): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.641:57298): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.664:57299): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.665:57300): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.666:57301): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.713:57302): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.713:57303): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.728:57304): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.729:57305): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.730:57306): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013707.760:57307): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013707.761:57308): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013707.773:57309): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013707.774:57310): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013707.775:57311): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.026:57312): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.026:57313): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.040:57314): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.040:57315): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.041:57316): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.066:57317): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.066:57318): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.271:57319): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.272:57320): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.273:57321): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.304:57322): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.304:57323): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.318:57324): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.318:57325): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.320:57326): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.357:57327): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.358:57328): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.402:57329): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.403:57330): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.404:57331): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.458:57332): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.458:57333): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.472:57334): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.473:57335): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.474:57336): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013708.508:57337): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013708.509:57338): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013708.520:57339): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013708.520:57340): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013708.522:57341): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013708.579:57342): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013708.580:57343): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74666B78616B79777A6262626173737A79796C72636B68656B74697078637878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730382E333132303133362D3331342D3231313936333538373339333933352F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013708.580:57344): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013708.583:57345): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013709.194:57346): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013709.194:57347): pid=447531 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013709.198:57348): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013709.198:57349): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013709.414:57350): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013709.414:57351): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013709.415:57352): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013709.478:57353): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013709.478:57354): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013709.493:57355): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013709.493:57356): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013709.494:57357): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013709.527:57358): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013709.527:57359): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013709.593:57360): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013709.593:57361): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013709.595:57362): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013709.661:57363): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013709.661:57364): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E666F6477626D74727576656666757A677767667863626674726863796276203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333730382E333132303133362D3331342D3231313936333538373339333933352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013709.662:57365): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013709.665:57366): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013713.220:57367): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013713.220:57368): pid=447585 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013713.224:57369): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013713.224:57370): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013713.237:57371): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013713.237:57372): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013713.239:57373): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013713.269:57374): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013713.269:57375): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013713.318:57376): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013713.318:57377): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013713.320:57378): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013713.349:57379): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013713.349:57380): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013713.359:57381): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013713.360:57382): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013713.361:57383): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447617 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013713.394:57384): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013713.394:57385): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013714.198:57386): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013714.198:57387): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013714.200:57388): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013714.263:57389): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013714.263:57390): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013714.284:57391): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013714.284:57392): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013714.285:57393): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013714.316:57394): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013714.317:57395): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013714.328:57396): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013714.328:57397): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013714.329:57398): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013714.383:57399): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013714.383:57400): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7679686C75616973636A67667465766F6B62757877737666646D6564766374203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333731332E333535333439382D3335302D33353130343335373431383832302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013714.384:57401): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013714.388:57402): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013715.789:57403): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013715.789:57404): pid=447679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013715.793:57405): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013715.793:57406): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013716.502:57407): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.502:57408): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.504:57409): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447685 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013716.546:57410): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013716.547:57411): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013716.612:57412): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.612:57413): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.613:57414): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013716.644:57415): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013716.644:57416): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013716.666:57417): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.667:57418): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.668:57419): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013716.698:57420): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013716.698:57421): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765013716.711:57422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013716.735:57423): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.735:57424): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.737:57425): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013716.797:57426): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013716.797:57427): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013716.814:57428): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.814:57429): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.815:57430): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013716.840:57431): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013716.841:57432): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013716.856:57433): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013716.856:57434): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013716.858:57435): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447783 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765013716.867:57436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013717.090:57437): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.091:57438): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.118:57439): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.118:57440): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.119:57441): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447800 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.152:57442): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.153:57443): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.174:57444): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.174:57445): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.176:57446): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.206:57447): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.206:57448): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.229:57449): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.230:57450): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.231:57451): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.283:57452): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.283:57453): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.300:57454): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.300:57455): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.301:57456): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.332:57457): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.332:57458): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.355:57459): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.356:57460): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.357:57461): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.620:57462): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.620:57463): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.636:57464): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.636:57465): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.637:57466): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447871 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.665:57467): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.665:57468): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.688:57469): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.688:57470): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.689:57471): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447885 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.719:57472): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.719:57473): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.733:57474): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.733:57475): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.735:57476): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.772:57477): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.772:57478): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.819:57479): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.819:57480): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.821:57481): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.883:57482): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.883:57483): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.909:57484): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.909:57485): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.910:57486): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013717.939:57487): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013717.940:57488): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013717.953:57489): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013717.954:57490): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013717.955:57491): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.209:57492): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.209:57493): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.338:57494): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.338:57495): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.339:57496): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.377:57497): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.377:57498): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.393:57499): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.393:57500): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.394:57501): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.433:57502): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.433:57503): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.449:57504): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.450:57505): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.451:57506): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=447988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.496:57507): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.496:57508): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.514:57509): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.514:57510): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.516:57511): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.546:57512): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.546:57513): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.558:57514): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.559:57515): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.560:57516): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.807:57517): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.808:57518): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013718.818:57519): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013718.818:57520): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013718.819:57521): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013718.849:57522): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013718.849:57523): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013719.530:57524): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013719.530:57525): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013719.531:57526): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013719.562:57527): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013719.562:57528): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013719.572:57529): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013719.572:57530): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013719.574:57531): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013719.609:57532): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013719.610:57533): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013719.637:57534): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013719.638:57535): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013719.639:57536): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013719.686:57537): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013719.686:57538): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013719.699:57539): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013719.699:57540): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013719.700:57541): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013719.732:57542): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013719.733:57543): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013719.744:57544): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013719.744:57545): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013719.745:57546): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013719.994:57547): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013719.994:57548): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.013:57549): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.013:57550): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.015:57551): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.069:57552): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.069:57553): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.086:57554): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.086:57555): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.087:57556): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.120:57557): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.120:57558): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.146:57559): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.146:57560): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.148:57561): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.197:57562): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.197:57563): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.210:57564): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.210:57565): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.211:57566): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.246:57567): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.246:57568): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.258:57569): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.258:57570): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.260:57571): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.517:57572): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.517:57573): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.532:57574): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.532:57575): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.533:57576): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448193 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.563:57577): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.563:57578): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.596:57579): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.596:57580): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.597:57581): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.630:57582): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.631:57583): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.644:57584): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.644:57585): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.645:57586): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.682:57587): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.682:57588): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.700:57589): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.700:57590): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.701:57591): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.746:57592): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.746:57593): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.757:57594): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.758:57595): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.759:57596): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013720.791:57597): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013720.791:57598): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013720.804:57599): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013720.805:57600): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013720.807:57601): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.042:57602): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.043:57603): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.068:57604): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.068:57605): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.070:57606): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.104:57607): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.105:57608): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.124:57609): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.124:57610): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.125:57611): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448296 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.154:57612): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.154:57613): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.184:57614): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.184:57615): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.185:57616): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.228:57617): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.228:57618): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.242:57619): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.243:57620): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.244:57621): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.273:57622): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.273:57623): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.287:57624): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.287:57625): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.288:57626): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.547:57627): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.547:57628): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.560:57629): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.560:57630): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.560:57631): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.584:57632): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.584:57633): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.697:57634): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.697:57635): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.700:57636): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.724:57637): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.725:57638): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.736:57639): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.736:57640): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.737:57641): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.768:57642): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.768:57643): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.793:57644): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.793:57645): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.794:57646): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.832:57647): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.832:57648): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.846:57649): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.846:57650): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.847:57651): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448416 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013721.874:57652): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013721.874:57653): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013721.885:57654): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013721.885:57655): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013721.886:57656): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448430 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.162:57657): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.162:57658): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.178:57659): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.178:57660): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.179:57661): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.201:57662): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.201:57663): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.329:57664): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.329:57665): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.331:57666): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448464 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.360:57667): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.360:57668): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.377:57669): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.377:57670): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.379:57671): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.413:57672): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.413:57673): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.438:57674): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.438:57675): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.440:57676): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.488:57677): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.489:57678): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.501:57679): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.501:57680): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.503:57681): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.532:57682): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.533:57683): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.543:57684): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.544:57685): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.545:57686): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013722.611:57687): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013722.611:57688): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737276666474666470696172796B696674776268687371766B6E6B6E6E61636E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732322E333731393235382D3632302D3234343834363135333538383237362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013722.612:57689): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013722.617:57690): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013722.839:57691): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013722.839:57692): pid=448539 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013722.843:57693): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.843:57694): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.856:57695): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.856:57696): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.857:57697): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013722.886:57698): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013722.886:57699): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013722.980:57700): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013722.980:57701): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013722.981:57702): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.005:57703): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.006:57704): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.020:57705): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.020:57706): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.021:57707): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.056:57708): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.056:57709): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.093:57710): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.093:57711): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.094:57712): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.142:57713): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.142:57714): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.157:57715): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.157:57716): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.158:57717): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.188:57718): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.188:57719): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.200:57720): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.200:57721): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.201:57722): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013723.265:57723): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013723.265:57724): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C78756864796A776B71666B6E74776F726D6F6A6375666F737076696D6C6A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732332E303133343535392D3634342D3136363235353134383630323430382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013723.266:57725): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013723.268:57726): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013723.484:57727): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013723.485:57728): pid=448631 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013723.489:57729): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.489:57730): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.512:57731): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.513:57732): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.514:57733): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.624:57734): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.624:57735): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.637:57736): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.637:57737): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.639:57738): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013723.669:57739): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.669:57740): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.683:57741): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.683:57742): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.685:57743): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013723.740:57744): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013723.740:57745): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747773726E7A76686A62767377616B616F6B756B6D6B77736E6C786B6470646D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732332E303133343535392D3634342D3136363235353134383630323430382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013723.740:57746): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013723.742:57747): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013723.971:57748): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013723.972:57749): pid=448679 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013723.974:57750): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013723.975:57751): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013723.988:57752): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013723.988:57753): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013723.989:57754): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013724.024:57755): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.024:57756): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.138:57757): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.139:57758): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.164:57759): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013724.191:57760): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.191:57761): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.209:57762): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.209:57763): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.210:57764): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013724.248:57765): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.249:57766): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.287:57767): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.287:57768): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.289:57769): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013724.341:57770): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.342:57771): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.354:57772): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.354:57773): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.355:57774): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013724.385:57775): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.385:57776): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.400:57777): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.400:57778): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.402:57779): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013724.466:57780): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013724.466:57781): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736E6979776C6B7A736F69676A6673636F69746F627164797362696C73716F67203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732342E323030373537352D3634342D3237363038353235383138373437312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013724.467:57782): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013724.474:57783): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765013724.487:57784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013724.490:57785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013724.494:57786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013724.497:57787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013724.713:57788): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013724.714:57789): pid=448771 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013724.716:57790): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.716:57791): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765013724.738:57792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013724.744:57793): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.744:57794): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.745:57795): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765013724.797:57796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013724.799:57797): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.799:57798): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.818:57799): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.818:57800): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013724.819:57801): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765013724.820:57802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013724.851:57803): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013724.851:57804): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013724.875:57805): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013724.875:57806): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765013724.877:57807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013724.877:57808): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013724.915:57809): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013724.915:57810): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6477696D786A6F6A64636A717470686464686179656B68756D64616A756B7265203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732342E323030373537352D3634342D3237363038353235383138373437312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013724.916:57811): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013724.920:57812): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013725.154:57813): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013725.155:57814): pid=448935 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013725.159:57815): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013725.159:57816): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013725.707:57817): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013725.707:57818): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013725.709:57819): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013725.740:57820): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013725.741:57821): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013725.814:57822): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013725.814:57823): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013725.816:57824): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013725.847:57825): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013725.847:57826): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013725.860:57827): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013725.860:57828): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013725.862:57829): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013725.900:57830): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013725.900:57831): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013725.945:57832): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013725.945:57833): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013725.946:57834): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.002:57835): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.002:57836): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.019:57837): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.019:57838): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.022:57839): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=448997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.055:57840): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.055:57841): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.067:57842): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.068:57843): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.070:57844): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013726.140:57845): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013726.140:57846): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6762676E776A65696577746974697777626A61746C636868667172747973797A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732352E383534363133332D3731332D3236373336323230313930393237392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013726.141:57847): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013726.144:57848): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013726.379:57849): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013726.379:57850): pid=449027 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013726.383:57851): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.383:57852): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.396:57853): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.396:57854): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.398:57855): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.428:57856): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.428:57857): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.468:57858): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.468:57859): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.470:57860): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.501:57861): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.501:57862): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.515:57863): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.515:57864): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.516:57865): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.555:57866): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.555:57867): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.593:57868): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.593:57869): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.595:57870): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.654:57871): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.654:57872): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.669:57873): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.669:57874): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.671:57875): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449089 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013726.703:57876): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013726.703:57877): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013726.718:57878): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013726.718:57879): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013726.719:57880): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449103 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013726.784:57881): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013726.785:57882): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7077786B716C72687072686873766473636E7A796F7969736C727267766E656A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732362E3530383831322D3733372D36343436333838363131303638312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013726.786:57883): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013726.788:57884): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013727.014:57885): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013727.014:57886): pid=449119 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013727.018:57887): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013727.019:57888): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013727.713:57889): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013727.713:57890): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013727.715:57891): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013727.771:57892): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013727.771:57893): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013727.792:57894): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013727.792:57895): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013727.793:57896): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013727.824:57897): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013727.824:57898): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013727.837:57899): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013727.837:57900): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013727.839:57901): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013727.906:57902): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013727.906:57903): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F706B73666C686F657A6C646579776464666E666A7A6765636C786375716B63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732362E3530383831322D3733372D36343436333838363131303638312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013727.907:57904): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013727.909:57905): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013728.128:57906): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013728.128:57907): pid=449167 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013728.132:57908): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.132:57909): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.157:57910): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.157:57911): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.158:57912): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449170 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.185:57913): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.186:57914): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.236:57915): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.236:57916): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.237:57917): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.261:57918): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.261:57919): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.274:57920): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.274:57921): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.276:57922): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.308:57923): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.308:57924): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.336:57925): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.336:57926): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.337:57927): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.386:57928): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.386:57929): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.403:57930): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.403:57931): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.404:57932): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.434:57933): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.435:57934): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.447:57935): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.447:57936): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.449:57937): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013728.514:57938): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013728.515:57939): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6E6B7579776D63777775697165676A787A77726B706B796574667762707A6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732382E323639303735322D3737332D3133333237323933353937303636392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013728.516:57940): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013728.518:57941): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013728.741:57942): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013728.741:57943): pid=449259 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013728.745:57944): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.745:57945): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.772:57946): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.773:57947): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.774:57948): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.827:57949): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.827:57950): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.842:57951): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.842:57952): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.844:57953): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449277 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013728.875:57954): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013728.875:57955): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013728.886:57956): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013728.886:57957): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013728.888:57958): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013728.945:57959): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013728.945:57960): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D68686E637A796774656668776263716E707066637A636A646D647A6E6771203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732382E323639303735322D3737332D3133333237323933353937303636392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013728.946:57961): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013728.948:57962): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013729.159:57963): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013729.159:57964): pid=449307 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013729.164:57965): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.164:57966): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.195:57967): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.195:57968): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.196:57969): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013729.227:57970): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.227:57971): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.398:57972): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.398:57973): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.400:57974): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013729.431:57975): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.431:57976): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.445:57977): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.445:57978): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.447:57979): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013729.483:57980): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.483:57981): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.505:57982): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.505:57983): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.506:57984): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013729.575:57985): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.576:57986): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.588:57987): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.588:57988): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.590:57989): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013729.622:57990): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013729.622:57991): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013729.635:57992): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013729.635:57993): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013729.636:57994): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013729.704:57995): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013729.704:57996): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C62686E6D6C686A78737A75667A7278666E747263756E78706E6D756F777878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333732392E343338393232342D3830392D3135363136393737393834323535362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013729.704:57997): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013729.707:57998): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765013730.035:57999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765013730.693:58000): prog-id=2324 op=LOAD
type=BPF msg=audit(1765013730.694:58001): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.694:58002): prog-id=2325 op=LOAD
type=BPF msg=audit(1765013730.694:58003): prog-id=2326 op=LOAD
type=BPF msg=audit(1765013730.694:58004): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.694:58005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.695:58006): prog-id=2327 op=LOAD
type=BPF msg=audit(1765013730.695:58007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.700:58008): prog-id=2328 op=LOAD
type=BPF msg=audit(1765013730.700:58009): prog-id=2329 op=LOAD
type=BPF msg=audit(1765013730.700:58010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.700:58011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.708:58012): prog-id=2330 op=LOAD
type=BPF msg=audit(1765013730.708:58013): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.710:58014): prog-id=2331 op=LOAD
type=BPF msg=audit(1765013730.710:58015): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.710:58016): prog-id=2332 op=LOAD
type=BPF msg=audit(1765013730.710:58017): prog-id=2333 op=LOAD
type=BPF msg=audit(1765013730.710:58018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013730.710:58019): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765013730.718:58020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013730.786:58021): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013730.787:58022): pid=449399 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013730.791:58023): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013730.791:58024): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013730.806:58025): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013730.806:58026): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013730.807:58027): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013730.839:58028): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013730.840:58029): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013730.901:58030): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013730.901:58031): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013730.902:58032): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013730.932:58033): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013730.932:58034): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013730.947:58035): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013730.947:58036): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013730.948:58037): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013730.986:58038): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013730.986:58039): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.017:58040): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.017:58041): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.019:58042): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013731.066:58043): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.066:58044): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.080:58045): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.080:58046): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.082:58047): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013731.116:58048): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.117:58049): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.133:58050): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.133:58051): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.135:58052): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013731.206:58053): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013731.207:58054): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A716B6872616F646B6D777968756470766B786273736A67716B65656D6F6475203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733302E393430323532332D3833332D3232323337313131393434323032382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013731.208:58055): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013731.214:58056): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013731.460:58057): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013731.460:58058): pid=449590 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013731.464:58059): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.464:58060): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.494:58061): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.494:58062): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.496:58063): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013731.552:58064): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.553:58065): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.573:58066): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.573:58067): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.574:58068): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449608 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013731.606:58069): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.606:58070): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.624:58071): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.624:58072): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.626:58073): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013731.695:58074): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013731.695:58075): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717873666968776B6E6D67656C6C7776796274636E796E766C726973757A6864203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733302E393430323532332D3833332D3232323337313131393434323032382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013731.696:58076): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013731.700:58077): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013731.928:58078): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013731.928:58079): pid=449638 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013731.932:58080): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.932:58081): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013731.950:58082): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013731.951:58083): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013731.952:58084): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449641 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013731.982:58085): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013731.982:58086): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.028:58087): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.028:58088): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.030:58089): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.058:58090): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.058:58091): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.072:58092): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.073:58093): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.074:58094): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449668 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.109:58095): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.109:58096): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.147:58097): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.147:58098): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.149:58099): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.195:58100): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.195:58101): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.207:58102): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.207:58103): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.209:58104): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449700 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.234:58105): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.235:58106): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.246:58107): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.246:58108): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.248:58109): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013732.312:58110): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013732.313:58111): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62756B7073637077766F6E70626A6868756D71706E73726E6668786B6F77787A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733322E303636323038362D3836392D3231303236383036303332373337342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013732.314:58112): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013732.317:58113): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013732.541:58114): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013732.542:58115): pid=449730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013732.546:58116): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.546:58117): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.573:58118): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.573:58119): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.574:58120): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.621:58121): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.621:58122): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.632:58123): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.632:58124): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.634:58125): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013732.663:58126): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.663:58127): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.675:58128): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.675:58129): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.677:58130): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013732.739:58131): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013732.739:58132): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B616E6B77797562736D6A6763656270646366646E646478756F7A6F72626876203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733322E303636323038362D3836392D3231303236383036303332373337342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013732.740:58133): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013732.743:58134): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013732.960:58135): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013732.960:58136): pid=449778 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013732.964:58137): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013732.964:58138): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013732.977:58139): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013732.977:58140): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013732.979:58141): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449781 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013733.005:58142): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013733.005:58143): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013733.180:58144): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013733.181:58145): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013733.182:58146): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013733.209:58147): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013733.209:58148): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013733.220:58149): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013733.220:58150): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013733.222:58151): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013733.252:58152): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013733.252:58153): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013733.275:58154): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013733.275:58155): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013733.276:58156): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013733.336:58157): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013733.336:58158): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013733.349:58159): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013733.349:58160): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013733.351:58161): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013733.380:58162): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013733.380:58163): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013733.400:58164): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013733.400:58165): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013733.401:58166): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013733.467:58167): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013733.467:58168): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687965676B6173726B6A696F6E6564687464796676656576616175786573616E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733332E3231363932392D3930352D3236303332333530393339303937382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013733.468:58169): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013733.484:58170): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765013733.487:58171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765013734.092:58172): prog-id=2334 op=LOAD
type=BPF msg=audit(1765013734.092:58173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.092:58174): prog-id=2335 op=LOAD
type=BPF msg=audit(1765013734.092:58175): prog-id=2336 op=LOAD
type=BPF msg=audit(1765013734.092:58176): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.092:58177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.094:58178): prog-id=2337 op=LOAD
type=BPF msg=audit(1765013734.094:58179): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.099:58180): prog-id=2338 op=LOAD
type=BPF msg=audit(1765013734.099:58181): prog-id=2339 op=LOAD
type=BPF msg=audit(1765013734.099:58182): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.099:58183): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.107:58184): prog-id=2340 op=LOAD
type=BPF msg=audit(1765013734.107:58185): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.110:58186): prog-id=2341 op=LOAD
type=BPF msg=audit(1765013734.110:58187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.110:58188): prog-id=2342 op=LOAD
type=BPF msg=audit(1765013734.110:58189): prog-id=2343 op=LOAD
type=BPF msg=audit(1765013734.111:58190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013734.111:58191): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765013734.121:58192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013734.183:58193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013734.183:58194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013734.226:58195): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013734.226:58196): pid=449870 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013734.230:58197): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.230:58198): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.244:58199): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.244:58200): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.245:58201): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013734.270:58202): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.270:58203): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.580:58204): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.580:58205): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.582:58206): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013734.609:58207): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.609:58208): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.623:58209): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.624:58210): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.625:58211): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013734.658:58212): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.658:58213): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.676:58214): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.676:58215): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.677:58216): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=449990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013734.718:58217): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.718:58218): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.730:58219): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.730:58220): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.731:58221): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013734.758:58222): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013734.759:58223): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013734.773:58224): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013734.773:58225): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013734.775:58226): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013734.841:58227): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013734.842:58228): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774636A6B6667736B626B6378776269747A6B6171626E65717A6F6472727165203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733342E3631363937322D3933352D34303439383338333230393436352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013734.842:58229): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013734.847:58230): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013735.076:58231): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013735.076:58232): pid=450033 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013735.080:58233): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.080:58234): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.105:58235): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.105:58236): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.106:58237): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.135:58238): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.135:58239): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.246:58240): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.246:58241): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.248:58242): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.280:58243): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.280:58244): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.291:58245): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.291:58246): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.293:58247): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450063 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.327:58248): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.327:58249): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.368:58250): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.368:58251): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.370:58252): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.423:58253): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.423:58254): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.436:58255): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.436:58256): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.437:58257): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.468:58258): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.468:58259): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.483:58260): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.483:58261): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.484:58262): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013735.542:58263): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013735.543:58264): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6568797874766D7472687069726474666469716D7775627879797470616561203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733352E3238373535382D3935392D3133333431393933353336353032352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013735.543:58265): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013735.546:58266): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013735.754:58267): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013735.754:58268): pid=450125 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013735.758:58269): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.758:58270): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.785:58271): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.785:58272): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.787:58273): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.823:58274): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.823:58275): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.837:58276): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.837:58277): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.838:58278): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.866:58279): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.867:58280): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.902:58281): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.902:58282): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.904:58283): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013735.961:58284): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013735.961:58285): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013735.974:58286): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013735.975:58287): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013735.976:58288): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013736.004:58289): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013736.004:58290): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013736.017:58291): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013736.017:58292): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013736.018:58293): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013736.079:58294): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013736.079:58295): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646574766869736C716367727477757070616469626E61686C7962707275786A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733352E3238373535382D3935392D3133333431393933353336353032352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013736.080:58296): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013736.083:58297): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013736.311:58298): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013736.312:58299): pid=450198 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013736.315:58300): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013736.315:58301): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013736.327:58302): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013736.327:58303): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013736.328:58304): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013736.358:58305): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013736.359:58306): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.333:58307): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.334:58308): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.335:58309): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013737.364:58310): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.364:58311): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.374:58312): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.374:58313): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.375:58314): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013737.410:58315): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.410:58316): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.436:58317): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.436:58318): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.437:58319): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013737.482:58320): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.482:58321): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.500:58322): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.500:58323): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.502:58324): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013737.534:58325): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.534:58326): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.550:58327): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.550:58328): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.552:58329): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013737.614:58330): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013737.614:58331): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78646D7A7178636C72626F6E6B6F6E756B77766477767776777A626E63746872203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733372E3337313736322D313031302D3235313331383033373531363637372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013737.615:58332): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013737.618:58333): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013737.883:58334): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013737.884:58335): pid=450290 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013737.887:58336): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.887:58337): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013737.904:58338): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013737.904:58339): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013737.906:58340): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013737.937:58341): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013737.937:58342): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.144:58343): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.144:58344): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.146:58345): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.177:58346): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.177:58347): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.188:58348): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.188:58349): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.190:58350): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.225:58351): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.226:58352): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.251:58353): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.251:58354): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.253:58355): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.299:58356): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.300:58357): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.323:58358): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.323:58359): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.324:58360): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.355:58361): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.356:58362): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.370:58363): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.370:58364): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.372:58365): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013738.436:58366): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013738.436:58367): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6573796D6D657562766A65686370756C6C6B70686E72736478666F6D78797978203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733382E3138343939392D313033342D3135343939323531383936333339322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013738.436:58368): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013738.439:58369): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013738.654:58370): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013738.654:58371): pid=450382 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013738.658:58372): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.658:58373): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.675:58374): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.675:58375): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.676:58376): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450385 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.713:58377): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.713:58378): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.728:58379): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.728:58380): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.729:58381): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.760:58382): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.761:58383): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.789:58384): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.789:58385): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.791:58386): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.850:58387): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.851:58388): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.874:58389): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.875:58390): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.876:58391): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013738.910:58392): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013738.910:58393): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013738.923:58394): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013738.924:58395): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013738.925:58396): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013738.993:58397): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013738.993:58398): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6970696C687279796A636C62727876666E766D74636F6C7766706F6B6773716B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733382E3138343939392D313033342D3135343939323531383936333339322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013738.994:58399): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013738.997:58400): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013739.221:58401): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013739.221:58402): pid=450455 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013739.224:58403): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.225:58404): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.234:58405): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.235:58406): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.315:58407): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.336:58408): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.336:58409): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.398:58410): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.399:58411): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.400:58412): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.429:58413): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.429:58414): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.450:58415): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.450:58416): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.451:58417): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.486:58418): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.486:58419): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.509:58420): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.509:58421): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.511:58422): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.559:58423): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.560:58424): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.574:58425): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.574:58426): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.576:58427): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.610:58428): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.610:58429): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.626:58430): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.627:58431): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.628:58432): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013739.693:58433): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013739.693:58434): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716376797777666368787468766678706C636E6D6D7067656F6C6F77766F676B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333733392E343430303235362D313037392D3334323732373731363934332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013739.694:58435): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013739.696:58436): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013739.942:58437): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013739.942:58438): pid=450547 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013739.946:58439): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.946:58440): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013739.960:58441): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013739.961:58442): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013739.962:58443): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013739.994:58444): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013739.995:58445): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.107:58446): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.107:58447): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.108:58448): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013740.138:58449): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.139:58450): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.153:58451): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.153:58452): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.154:58453): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013740.191:58454): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.191:58455): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.214:58456): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.215:58457): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.216:58458): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013740.266:58459): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.266:58460): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.278:58461): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.278:58462): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.279:58463): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013740.312:58464): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.312:58465): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.328:58466): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.328:58467): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.330:58468): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013740.395:58469): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013740.395:58470): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A787862736468756D7465666F7875636A767872737561676C646F7362617161203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333734302E313436313833332D313130332D37313132383339353532383338352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013740.396:58471): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013740.399:58472): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013740.601:58473): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013740.601:58474): pid=450639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013740.605:58475): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.605:58476): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013740.637:58477): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013740.638:58478): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013740.639:58479): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013740.683:58480): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013740.683:58481): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013741.294:58482): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013741.294:58483): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013741.295:58484): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013741.326:58485): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013741.327:58486): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013741.353:58487): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013741.353:58488): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013741.355:58489): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013741.403:58490): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013741.403:58491): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013741.419:58492): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013741.419:58493): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013741.420:58494): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013741.454:58495): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013741.455:58496): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013741.471:58497): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013741.472:58498): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013741.473:58499): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013741.528:58500): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013741.529:58501): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D646F72646967617479717A6A666779677878686470736E72666B6864616C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333734302E313436313833332D313130332D37313132383339353532383338352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013741.530:58502): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013741.533:58503): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013741.750:58504): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013741.751:58505): pid=450712 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013741.754:58506): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013741.754:58507): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013741.774:58508): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013741.774:58509): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013741.775:58510): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013741.802:58511): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013741.802:58512): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.035:58513): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.035:58514): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.037:58515): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450729 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.066:58516): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.066:58517): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.082:58518): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.082:58519): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.083:58520): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450742 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.118:58521): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.118:58522): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.314:58523): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.315:58524): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.316:58525): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450761 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.364:58526): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.364:58527): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.379:58528): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.379:58529): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.380:58530): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450774 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.411:58531): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.411:58532): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.423:58533): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.423:58534): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.425:58535): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450788 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013742.489:58536): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013742.489:58537): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676C7770656C75757A667461696E64716B6F6776627579696B64636467766E72203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333734322E303732343035362D313135342D3238313137393133343333353834312F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013742.490:58538): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013742.493:58539): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013742.726:58540): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013742.727:58541): pid=450804 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013742.731:58542): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.731:58543): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.747:58544): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.747:58545): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.749:58546): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450807 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.777:58547): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.778:58548): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.925:58549): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.926:58550): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.927:58551): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450821 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013742.956:58552): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013742.956:58553): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013742.966:58554): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013742.966:58555): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013742.967:58556): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013743.002:58557): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013743.002:58558): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013743.228:58559): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013743.228:58560): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013743.230:58561): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013743.474:58562): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013743.475:58563): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013743.541:58564): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013743.542:58565): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013743.543:58566): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013743.571:58567): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013743.571:58568): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013743.584:58569): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013743.584:58570): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013743.586:58571): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013743.647:58572): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013743.647:58573): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774786C6271766B65696F65646B64616D6A6F76777069646A6C6B6373796971203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333734322E393632323337312D313138312D32373138323236333432393131302F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013743.648:58574): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013743.650:58575): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013743.878:58576): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013743.878:58577): pid=450896 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013743.881:58578): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013743.881:58579): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013743.898:58580): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013743.898:58581): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013743.900:58582): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013743.929:58583): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013743.929:58584): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013744.106:58585): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013744.106:58586): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013744.107:58587): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450914 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013744.135:58588): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013744.135:58589): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013744.158:58590): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013744.158:58591): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013744.159:58592): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013744.193:58593): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013744.193:58594): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013744.370:58595): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013744.371:58596): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013744.372:58597): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013744.419:58598): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013744.420:58599): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013744.439:58600): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013744.439:58601): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013744.441:58602): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013744.472:58603): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013744.472:58604): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013744.488:58605): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013744.488:58606): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013744.490:58607): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=450973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013744.550:58608): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013744.550:58609): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62647267766F6177677164707A7270706C6C6A6F6A70656F79676C636D637274203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333734342E313439393536372D313230382D3136363533323836323937303335382F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013744.551:58610): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013744.553:58611): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_LOGIN msg=audit(1765013745.633:58612): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013745.633:58613): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765013745.649:58614): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013745.649:58615): pid=450989 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013745.653:58616): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013745.653:58617): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765013745.689:58618): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013745.689:58619): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013745.690:58620): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013745.692:58621): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013745.695:58622): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013745.695:58623): pid=451019 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013745.701:58624): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013745.701:58625): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013745.718:58626): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013745.718:58627): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013745.719:58628): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013745.720:58629): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765013745.720:58630): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013745.754:58631): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013745.754:58632): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765013745.780:58633): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013745.780:58634): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013745.781:58635): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013745.783:58636): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013746.439:58637): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013746.439:58638): pid=451035 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013746.666:58639): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013746.666:58640): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013746.699:58641): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013746.699:58642): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013746.760:58643): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013746.761:58644): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013746.762:58645): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013746.764:58646): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013746.768:58647): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013746.768:58648): pid=451096 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013746.772:58649): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013746.772:58650): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765013747.313:58651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013747.504:58652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013754.200:58653): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013754.200:58654): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013754.202:58655): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451138 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013754.234:58656): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013754.234:58657): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013754.250:58658): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013754.250:58659): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013754.252:58660): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013754.284:58661): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013754.284:58662): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013754.504:58663): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013754.504:58664): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013754.506:58665): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451170 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013754.556:58666): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013754.556:58667): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013754.567:58668): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013754.567:58669): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013754.569:58670): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013754.600:58671): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013754.600:58672): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013754.620:58673): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013754.620:58674): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013754.622:58675): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013754.688:58676): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013754.689:58677): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A646F6B6970797565776665697271627964746D73786E756B72656C66777166203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735342E323431323734342D313234372D38303738313132323235353738322F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013754.690:58678): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013754.696:58679): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013755.488:58680): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013755.488:58681): pid=451213 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013755.492:58682): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.492:58683): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013755.508:58684): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.508:58685): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.509:58686): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013755.537:58687): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.537:58688): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013755.622:58689): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.622:58690): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.624:58691): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013755.652:58692): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.652:58693): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013755.677:58694): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.677:58695): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.678:58696): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013755.713:58697): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.713:58698): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765013755.717:58699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013755.721:58700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013755.725:58701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013755.729:58702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013755.748:58703): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.748:58704): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.749:58705): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013755.814:58706): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.814:58707): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013755.829:58708): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.829:58709): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.830:58710): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013755.865:58711): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013755.865:58712): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013755.882:58713): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013755.882:58714): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013755.883:58715): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013755.947:58716): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013755.947:58717): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79656E636B737572647262616A7876716B787178766B676F636C62696E6C6565203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735352E363630373639372D313237312D3133373031373737303732383538302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013755.948:58718): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013755.953:58719): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765013756.010:58720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013756.032:58721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013756.166:58722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013756.170:58723): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013756.170:58724): pid=451460 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013756.176:58725): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.176:58726): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765013756.189:58727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013756.191:58728): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.191:58729): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.193:58730): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013756.217:58731): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.217:58732): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.455:58733): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.455:58734): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.456:58735): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013756.485:58736): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.485:58737): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.497:58738): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.497:58739): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.498:58740): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013756.535:58741): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.535:58742): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.561:58743): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.561:58744): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.562:58745): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013756.604:58746): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.604:58747): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.618:58748): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.618:58749): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.619:58750): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451563 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013756.645:58751): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.645:58752): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.662:58753): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.662:58754): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.664:58755): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013756.725:58756): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013756.725:58757): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C726B656A636178636171636478797864616A7A6C7A786E796A786C7666716D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735362E343933323233322D313239382D37353938343138333037393831322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013756.725:58758): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013756.728:58759): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013756.938:58760): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013756.938:58761): pid=451593 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013756.941:58762): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013756.941:58763): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013756.963:58764): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013756.963:58765): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013756.964:58766): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.014:58767): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.015:58768): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.026:58769): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.026:58770): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.027:58771): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.055:58772): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.055:58773): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.073:58774): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.073:58775): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.074:58776): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013757.138:58777): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013757.139:58778): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716F656D6F676C6A7169616A766C7962687A616F6266736179647972726E69203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735362E343933323233322D313239382D37353938343138333037393831322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013757.140:58779): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013757.142:58780): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013757.381:58781): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013757.382:58782): pid=451639 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013757.384:58783): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.384:58784): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.397:58785): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.397:58786): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.399:58787): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.426:58788): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.426:58789): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.458:58790): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.458:58791): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.458:58792): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.498:58793): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.498:58794): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.618:58795): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.618:58796): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.620:58797): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.657:58798): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.657:58799): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.680:58800): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.680:58801): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.681:58802): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.728:58803): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.728:58804): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.739:58805): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.739:58806): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.740:58807): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451700 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013757.770:58808): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013757.770:58809): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013757.782:58810): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013757.782:58811): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013757.783:58812): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013757.847:58813): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013757.847:58814): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B73637772786778716C68736B7A6F6C77716E6D716B6A6E77696D6B666779203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735372E343435313137322D313239382D33393835353735373434313834332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013757.848:58815): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013757.851:58816): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013758.073:58817): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013758.073:58818): pid=451730 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013758.078:58819): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013758.078:58820): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013758.100:58821): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013758.100:58822): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013758.102:58823): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013758.155:58824): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013758.155:58825): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013758.166:58826): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013758.166:58827): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013758.168:58828): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013758.196:58829): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013758.196:58830): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013758.212:58831): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013758.212:58832): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013758.214:58833): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013758.276:58834): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013758.276:58835): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627470777A7377617A706E697A726873616C776F696B62657072616676796878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735372E343435313137322D313239382D33393835353735373434313834332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013758.277:58836): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013758.279:58837): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765013758.923:58838): prog-id=2344 op=LOAD
type=BPF msg=audit(1765013758.923:58839): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.923:58840): prog-id=2345 op=LOAD
type=BPF msg=audit(1765013758.923:58841): prog-id=2346 op=LOAD
type=BPF msg=audit(1765013758.923:58842): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.923:58843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.925:58844): prog-id=2347 op=LOAD
type=BPF msg=audit(1765013758.925:58845): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.929:58846): prog-id=2348 op=LOAD
type=BPF msg=audit(1765013758.930:58847): prog-id=2349 op=LOAD
type=BPF msg=audit(1765013758.930:58848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.930:58849): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.937:58850): prog-id=2350 op=LOAD
type=BPF msg=audit(1765013758.937:58851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.939:58852): prog-id=2351 op=LOAD
type=BPF msg=audit(1765013758.939:58853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.939:58854): prog-id=2352 op=LOAD
type=BPF msg=audit(1765013758.939:58855): prog-id=2353 op=LOAD
type=BPF msg=audit(1765013758.939:58856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013758.939:58857): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765013758.980:58858): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013758.981:58859): pid=451776 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013758.985:58860): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013758.985:58861): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013759.204:58862): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013759.204:58863): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013759.205:58864): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013759.265:58865): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013759.265:58866): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013759.282:58867): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013759.282:58868): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013759.283:58869): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013759.313:58870): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013759.313:58871): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013759.327:58872): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013759.327:58873): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013759.328:58874): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=451842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765013759.392:58875): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765013759.392:58876): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64656D7562616D7968616470716B7175787979796A766368756F6C756D776876203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031333735372E343435313137322D313239382D33393835353735373434313834332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765013759.394:58877): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765013759.399:58878): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765013760.079:58879): prog-id=2354 op=LOAD
type=BPF msg=audit(1765013760.080:58880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.080:58881): prog-id=2355 op=LOAD
type=BPF msg=audit(1765013760.080:58882): prog-id=2356 op=LOAD
type=BPF msg=audit(1765013760.080:58883): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.080:58884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.081:58885): prog-id=2357 op=LOAD
type=BPF msg=audit(1765013760.081:58886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.086:58887): prog-id=2358 op=LOAD
type=BPF msg=audit(1765013760.086:58888): prog-id=2359 op=LOAD
type=BPF msg=audit(1765013760.086:58889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.086:58890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.093:58891): prog-id=2360 op=LOAD
type=BPF msg=audit(1765013760.093:58892): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.096:58893): prog-id=2361 op=LOAD
type=BPF msg=audit(1765013760.096:58894): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.096:58895): prog-id=2362 op=LOAD
type=BPF msg=audit(1765013760.096:58896): prog-id=2363 op=LOAD
type=BPF msg=audit(1765013760.096:58897): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.096:58898): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.275:58899): prog-id=2364 op=LOAD
type=SYSCALL msg=audit(1765013760.275:58899): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcf469ac10 a2=90 a3=9500000001 items=0 ppid=451916 pid=451917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765013760.275:58899): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343065616435316138383636663139366264383932363132346564323335
type=SERVICE_START msg=audit(1765013760.358:58900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013760.362:58901): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765013760.362:58902): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765013760.363:58903): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765013760.365:58904): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013760.436:58905): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765013760.436:58906): pid=451923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013760.449:58907): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765013760.450:58908): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765013760.450:58909): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765013760.451:58910): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013760.453:58911): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765013760.453:58912): pid=451954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013760.463:58913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765013760.864:58914): prog-id=2365 op=LOAD
type=BPF msg=audit(1765013760.864:58915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.864:58916): prog-id=2366 op=LOAD
type=BPF msg=audit(1765013760.864:58917): prog-id=2367 op=LOAD
type=BPF msg=audit(1765013760.864:58918): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.864:58919): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.865:58920): prog-id=2368 op=LOAD
type=BPF msg=audit(1765013760.865:58921): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.870:58922): prog-id=2369 op=LOAD
type=BPF msg=audit(1765013760.870:58923): prog-id=2370 op=LOAD
type=BPF msg=audit(1765013760.870:58924): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.870:58925): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.877:58926): prog-id=2371 op=LOAD
type=BPF msg=audit(1765013760.877:58927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.879:58928): prog-id=2372 op=LOAD
type=BPF msg=audit(1765013760.879:58929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.879:58930): prog-id=2373 op=LOAD
type=BPF msg=audit(1765013760.879:58931): prog-id=2374 op=LOAD
type=BPF msg=audit(1765013760.879:58932): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765013760.879:58933): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765013760.890:58934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_metadata_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013760.893:58935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013760.917:58936): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765013760.917:58937): pid=451858 uid=1000 auid=1000 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765013760.922:58938): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013760.922:58939): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765013760.950:58940): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765013760.950:58941): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013760.951:58942): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=452018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013760.985:58943): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765013760.985:58944): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765013761.137:58945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765013762.082:58946): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765013762.082:58947): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6E616D6573706163655F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D7064637079357864752F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765013762.083:58948): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765013762.085:58949): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013762.613:58950): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=446323 suid=1000 rport=57214 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013762.613:58951): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765013762.616:58952): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765013762.616:58953): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765013762.617:58954): pid=446320 uid=0 auid=1000 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=446320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=USER_END msg=audit(1765013762.666:58955): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765013762.667:58956): pid=452059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013764.711:58957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013765.078:58958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013772.714:58959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013777.714:58960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013777.861:58961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013786.718:58962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013786.722:58963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013786.726:58964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013786.731:58965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013787.024:58966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013787.066:58967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013787.107:58968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013787.122:58969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013791.069:58970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013791.186:58971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013791.204:58972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013791.418:58973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013795.710:58974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013796.059:58975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013807.186:58976): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013807.186:58977): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013807.245:58978): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013807.245:58979): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013807.247:58980): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013807.253:58981): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013807.255:58982): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013807.256:58983): pid=452357 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013807.258:58984): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013807.258:58985): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013807.260:58986): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013807.260:58987): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013807.323:58988): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013807.323:58989): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013807.324:58990): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013807.354:58991): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013808.043:58992): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013808.043:58993): pid=452372 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013808.134:58994): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013808.134:58995): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013808.220:58996): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013808.220:58997): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013808.283:58998): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013808.283:58999): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013808.284:59000): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013808.301:59001): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765013808.304:59002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013808.304:59003): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013808.304:59004): pid=452420 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013808.309:59005): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013808.309:59006): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765013808.480:59007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013817.717:59008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013817.721:59009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013817.724:59010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013817.727:59011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013818.061:59012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013818.107:59013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013818.119:59014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013818.174:59015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013821.713:59016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013821.716:59017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013821.921:59018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013821.967:59019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013826.715:59020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013827.052:59021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013838.708:59022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013838.895:59023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013848.711:59024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013848.714:59025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013848.718:59026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013848.722:59027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013849.058:59028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013849.095:59029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013849.128:59030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013849.305:59031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013852.709:59032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013852.713:59033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013852.929:59034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013852.959:59035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013853.286:59036): pid=452911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=452911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765013857.711:59037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013857.995:59038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013868.699:59039): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013868.699:59040): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013868.771:59041): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013868.771:59042): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013868.773:59043): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013868.779:59044): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013868.782:59045): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013868.782:59046): pid=452941 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013868.787:59047): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013868.787:59048): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013868.793:59049): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013868.793:59050): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013868.848:59051): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013868.848:59052): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013868.849:59053): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013868.852:59054): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013869.477:59055): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013869.478:59056): pid=452956 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013869.602:59057): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013869.602:59058): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765013869.715:59059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013869.736:59060): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013869.736:59061): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013869.799:59062): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013869.800:59063): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013869.801:59064): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013869.807:59065): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013869.811:59066): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013869.811:59067): pid=453011 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013869.817:59068): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013869.817:59069): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765013869.921:59070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013879.719:59071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013879.722:59072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013879.725:59073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013879.728:59074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013879.979:59075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013880.065:59076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013880.132:59077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013880.193:59078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013883.712:59079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013883.713:59080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013883.839:59081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013884.097:59082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013888.709:59083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013889.088:59084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013900.710:59085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013900.885:59086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013910.868:59087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013910.870:59088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013910.871:59089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013910.873:59090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013911.104:59091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013911.116:59092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013911.309:59093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013911.370:59094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013914.717:59095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013914.720:59096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013915.129:59097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013915.172:59098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013919.715:59099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013920.133:59100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013930.238:59101): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013930.238:59102): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013930.307:59103): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013930.308:59104): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013930.309:59105): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013930.314:59106): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013930.317:59107): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013930.317:59108): pid=453491 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013930.320:59109): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013930.321:59110): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013930.334:59111): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013930.334:59112): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013930.396:59113): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013930.396:59114): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013930.397:59115): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013930.399:59116): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013931.000:59117): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013931.001:59118): pid=453506 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013931.145:59119): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013931.145:59120): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013931.325:59121): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013931.325:59122): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013931.385:59123): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013931.385:59124): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013931.386:59125): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013931.403:59126): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765013931.404:59127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013931.406:59128): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013931.407:59129): pid=453552 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013931.411:59130): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013931.411:59131): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765013931.583:59132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013941.715:59133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013941.718:59134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013941.722:59135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013941.726:59136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013942.421:59137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013942.450:59138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013942.463:59139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013942.478:59140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013945.749:59141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013945.752:59142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013945.940:59143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013946.026:59144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013950.715:59145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013951.066:59146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013961.712:59147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013961.843:59148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765013964.590:59149): pid=452861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=452911 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765013964.590:59150): pid=452861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=452861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765013964.590:59151): pid=452861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.210.21.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013972.708:59152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013972.710:59153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013972.712:59154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013972.714:59155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013972.973:59156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013973.007:59157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013973.080:59158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013973.102:59159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013976.715:59160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013976.718:59161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013976.908:59162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013976.953:59163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765013981.714:59164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013982.051:59165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765013991.763:59166): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013991.763:59167): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013991.833:59168): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013991.833:59169): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013991.835:59170): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013991.840:59171): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013991.843:59172): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013991.843:59173): pid=454045 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013991.849:59174): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013991.849:59175): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013991.864:59176): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013991.864:59177): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013991.926:59178): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013991.926:59179): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013991.927:59180): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013991.941:59181): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765013991.943:59182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765013992.123:59183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765013992.561:59184): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013992.562:59185): pid=454060 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013992.696:59186): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013992.696:59187): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765013992.855:59188): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765013992.855:59189): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765013992.901:59190): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765013992.901:59191): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765013992.902:59192): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765013992.905:59193): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013992.908:59194): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765013992.908:59195): pid=454133 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765013992.910:59196): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765013992.910:59197): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014003.711:59198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014003.714:59199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014003.718:59200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014003.723:59201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014003.983:59202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014004.030:59203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014004.146:59204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014004.271:59205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014007.710:59206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014007.714:59207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014007.897:59208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014008.005:59209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014012.712:59210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014013.036:59211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014022.711:59212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014022.905:59213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014034.713:59214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014034.716:59215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014034.720:59216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014034.723:59217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014035.024:59218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014035.054:59219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014035.112:59220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014035.167:59221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014038.711:59222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014038.714:59223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014038.915:59224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014038.947:59225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014043.712:59226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014044.082:59227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014053.301:59228): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014053.302:59229): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014053.366:59230): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014053.367:59231): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014053.369:59232): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014053.384:59233): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014053.387:59234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014053.387:59235): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014053.388:59236): pid=454603 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014053.395:59237): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014053.395:59238): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014053.409:59239): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014053.409:59240): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014053.471:59241): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014053.471:59242): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014053.472:59243): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014053.475:59244): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014053.544:59245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014054.122:59246): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014054.122:59247): pid=454624 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014054.317:59248): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014054.317:59249): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014054.350:59250): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014054.350:59251): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014054.406:59252): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014054.406:59253): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014054.407:59254): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014054.409:59255): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014054.413:59256): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014054.413:59257): pid=454690 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014054.416:59258): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014054.417:59259): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765014059.145:59260): pid=454706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014059.147:59261): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454706 suid=74 rport=42626 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014059.147:59262): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454706 suid=74 rport=42626 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014061.927:59263): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454706 suid=74 rport=42626 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014061.927:59264): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454706 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014061.928:59265): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014061.928:59266): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014061.928:59267): pid=454705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014062.654:59268): pid=454708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014062.655:59269): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454708 suid=74 rport=42638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014062.655:59270): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454708 suid=74 rport=42638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014064.496:59271): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454708 suid=74 rport=42638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014064.496:59272): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454708 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014064.497:59273): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014064.497:59274): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014064.497:59275): pid=454707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014064.887:59276): pid=454710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014064.888:59277): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454710 suid=74 rport=60690 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014064.888:59278): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454710 suid=74 rport=60690 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765014065.717:59279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014065.721:59280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014065.725:59281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014065.728:59282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014066.010:59283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014066.036:59284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014066.038:59285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014066.137:59286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014067.406:59287): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454710 suid=74 rport=60690 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014067.407:59288): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454710 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014067.407:59289): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014067.408:59290): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014067.408:59291): pid=454709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014068.005:59292): pid=454827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014068.006:59293): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454827 suid=74 rport=60704 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014068.006:59294): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454827 suid=74 rport=60704 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765014069.712:59295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014069.716:59296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014070.096:59297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014070.141:59298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014070.293:59299): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454827 suid=74 rport=60704 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014070.293:59300): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454827 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014070.294:59301): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014070.295:59302): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014070.295:59303): pid=454826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014070.659:59304): pid=454880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014070.660:59305): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454880 suid=74 rport=60706 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014070.661:59306): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454880 suid=74 rport=60706 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014071.869:59307): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454880 suid=74 rport=60706 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014071.869:59308): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454880 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014071.870:59309): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014071.870:59310): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014071.871:59311): pid=454879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014074.431:59312): pid=454882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014074.432:59313): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454882 suid=74 rport=59666 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014074.432:59314): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454882 suid=74 rport=59666 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765014074.709:59315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014075.114:59316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014076.824:59317): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454882 suid=74 rport=59666 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014076.824:59318): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454882 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014076.825:59319): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014076.826:59320): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014076.826:59321): pid=454881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014077.306:59322): pid=454912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014077.307:59323): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454912 suid=74 rport=59680 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014077.308:59324): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454912 suid=74 rport=59680 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014079.236:59325): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454912 suid=74 rport=59680 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014079.237:59326): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454912 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014079.237:59327): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014079.238:59328): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014079.238:59329): pid=454911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014079.771:59330): pid=454914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014079.772:59331): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454914 suid=74 rport=59682 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014079.772:59332): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454914 suid=74 rport=59682 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014081.902:59333): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454914 suid=74 rport=59682 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014081.902:59334): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454914 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014081.903:59335): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014081.904:59336): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014081.904:59337): pid=454913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014082.473:59338): pid=454916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014082.474:59339): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454916 suid=74 rport=56636 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014082.474:59340): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454916 suid=74 rport=56636 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765014083.713:59341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014083.902:59342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014084.546:59343): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454916 suid=74 rport=56636 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014084.546:59344): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454916 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014084.547:59345): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014084.547:59346): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014084.547:59347): pid=454915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014085.639:59348): pid=454943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014085.641:59349): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454943 suid=74 rport=56638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014085.641:59350): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=454943 suid=74 rport=56638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014087.586:59351): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=454943 suid=74 rport=56638 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014087.587:59352): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454943 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014087.588:59353): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014087.588:59354): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=454942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014087.588:59355): pid=454942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014096.716:59356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014096.720:59357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014096.723:59358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014096.726:59359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014097.077:59360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014097.105:59361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014097.134:59362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014097.159:59363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014100.716:59364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014100.720:59365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014100.843:59366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014101.030:59367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014105.717:59368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014106.045:59369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014114.717:59370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014114.849:59371): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014114.849:59372): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014114.881:59373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014114.912:59374): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014114.913:59375): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014114.915:59376): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014114.918:59377): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014114.921:59378): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014114.921:59379): pid=455201 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014114.925:59380): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014114.925:59381): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014114.930:59382): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014114.930:59383): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014114.998:59384): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014114.998:59385): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014114.999:59386): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014115.002:59387): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014115.446:59388): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014115.447:59389): pid=455216 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014115.451:59390): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014115.451:59391): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014115.483:59392): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014115.483:59393): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014115.531:59394): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014115.531:59395): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014115.532:59396): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014115.535:59397): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014115.537:59398): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014115.537:59399): pid=455251 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014115.541:59400): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014115.542:59401): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014115.544:59402): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014115.544:59403): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014115.601:59404): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014115.601:59405): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014115.602:59406): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014115.604:59407): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.013:59408): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014117.013:59409): pid=455266 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.019:59410): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014117.020:59411): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014117.056:59412): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014117.057:59413): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014117.116:59414): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014117.117:59415): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014117.117:59416): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014117.122:59417): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.125:59418): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014117.125:59419): pid=455438 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.130:59420): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014117.130:59421): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014117.133:59422): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014117.133:59423): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014117.185:59424): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014117.185:59425): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014117.185:59426): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014117.188:59427): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.780:59428): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014117.781:59429): pid=455453 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.846:59430): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014117.846:59431): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014117.926:59432): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014117.926:59433): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014117.985:59434): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014117.986:59435): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014117.986:59436): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014117.989:59437): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.992:59438): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014117.992:59439): pid=455500 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014117.997:59440): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014117.997:59441): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014127.717:59442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014127.721:59443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014127.724:59444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014127.729:59445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014128.074:59446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014128.097:59447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014128.102:59448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014128.130:59449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014131.705:59450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014131.707:59451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014131.856:59452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014132.001:59453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014136.711:59454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014137.036:59455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014145.714:59456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014145.922:59457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014158.709:59458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014158.712:59459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014158.714:59460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014158.716:59461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014158.926:59462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014159.062:59463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014159.086:59464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014159.163:59465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014162.707:59466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014162.710:59467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014162.862:59468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014162.963:59469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014167.715:59470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014168.116:59471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014176.710:59472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014176.849:59473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014178.407:59474): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014178.407:59475): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014178.471:59476): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014178.471:59477): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014178.473:59478): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014178.478:59479): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014178.480:59480): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014178.481:59481): pid=456008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014178.488:59482): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014178.488:59483): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014178.502:59484): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014178.502:59485): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014178.593:59486): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014178.593:59487): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014178.594:59488): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014178.597:59489): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014179.187:59490): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014179.188:59491): pid=456023 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014179.264:59492): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014179.264:59493): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014180.201:59494): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014180.202:59495): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014180.253:59496): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014180.253:59497): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014180.254:59498): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014180.257:59499): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014180.259:59500): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014180.260:59501): pid=456069 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014180.264:59502): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014180.264:59503): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014189.715:59504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014189.719:59505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014189.723:59506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014189.726:59507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014190.073:59508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014190.125:59509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014190.146:59510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014190.179:59511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014193.708:59512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014193.711:59513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014193.833:59514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014194.034:59515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014198.713:59516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014199.117:59517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014207.720:59518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014207.872:59519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014208.173:59520): pid=456307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=456307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014208.442:59521): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=456307 suid=74 rport=40354 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014208.442:59522): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=456307 suid=74 rport=40354 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014210.204:59523): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=456307 suid=74 rport=40354 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014210.204:59524): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=456307 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014210.204:59525): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.88.225.195 addr=222.88.225.195 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014210.204:59526): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=456306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014210.204:59527): pid=456306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014220.713:59528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014220.717:59529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014220.720:59530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014220.724:59531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014221.024:59532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014221.066:59533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014221.148:59534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014221.176:59535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014224.715:59536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014224.718:59537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014224.841:59538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014224.998:59539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014229.710:59540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014230.094:59541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014238.711:59542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014238.903:59543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014240.665:59544): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014240.665:59545): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014240.730:59546): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014240.731:59547): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014240.732:59548): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014240.737:59549): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014240.740:59550): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014240.740:59551): pid=456562 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014240.744:59552): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014240.744:59553): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014240.753:59554): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014240.753:59555): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014240.811:59556): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014240.811:59557): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014240.812:59558): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014240.816:59559): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014241.490:59560): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014241.490:59561): pid=456577 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014241.590:59562): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014241.591:59563): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014241.742:59564): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014241.743:59565): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014241.795:59566): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014241.796:59567): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014241.799:59568): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014241.803:59569): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014241.806:59570): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014241.806:59571): pid=456626 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014241.811:59572): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014241.811:59573): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014251.713:59574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014251.717:59575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014251.721:59576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014251.725:59577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014252.067:59578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014252.095:59579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014252.104:59580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014252.124:59581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014255.723:59582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014255.728:59583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014255.936:59584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014255.986:59585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014260.721:59586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014261.246:59587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014270.252:59588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014270.418:59589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014282.715:59590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014282.718:59591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014282.721:59592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014282.724:59593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014282.972:59594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014283.062:59595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014283.119:59596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014283.174:59597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014286.713:59598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014286.716:59599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014286.898:59600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014286.964:59601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014291.718:59602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014292.101:59603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014300.714:59604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014300.880:59605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014302.205:59606): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014302.205:59607): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014302.274:59608): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014302.274:59609): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014302.277:59610): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014302.284:59611): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014302.287:59612): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014302.288:59613): pid=457115 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014302.294:59614): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014302.294:59615): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014302.312:59616): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014302.312:59617): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014302.377:59618): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014302.378:59619): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014302.379:59620): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014302.381:59621): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014303.067:59622): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014303.067:59623): pid=457130 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014303.105:59624): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014303.106:59625): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014304.849:59626): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014304.849:59627): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014304.908:59628): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014304.908:59629): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014304.909:59630): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014304.912:59631): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014304.917:59632): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014304.917:59633): pid=457176 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014304.921:59634): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014304.921:59635): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014313.717:59636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014313.721:59637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014313.728:59638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014313.734:59639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014314.029:59640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014314.091:59641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014314.150:59642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014314.222:59643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014317.712:59644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014317.715:59645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014317.923:59646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014317.976:59647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014322.708:59648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014323.078:59649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014331.708:59650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014331.903:59651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014344.741:59652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014344.744:59653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014344.748:59654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014344.751:59655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014345.198:59656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014345.222:59657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014345.225:59658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014345.352:59659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014348.713:59660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014348.717:59661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014348.941:59662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014348.974:59663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014353.708:59664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014354.271:59665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014362.712:59666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014362.969:59667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014365.352:59668): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014365.352:59669): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014365.420:59670): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014365.420:59671): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014365.422:59672): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014365.428:59673): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014365.431:59674): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014365.431:59675): pid=457663 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014365.435:59676): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014365.435:59677): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014365.456:59678): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014365.456:59679): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014365.516:59680): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014365.516:59681): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014365.517:59682): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014365.520:59683): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014366.206:59684): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014366.206:59685): pid=457678 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014366.338:59686): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014366.338:59687): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014366.425:59688): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014366.425:59689): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014366.477:59690): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014366.477:59691): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014366.477:59692): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014366.480:59693): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014366.483:59694): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014366.483:59695): pid=457724 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014366.487:59696): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014366.487:59697): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014375.716:59698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014375.720:59699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014375.725:59700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014375.729:59701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014376.067:59702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014376.097:59703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014376.168:59704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014376.169:59705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014379.717:59706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014379.720:59707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014379.843:59708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014380.083:59709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014384.709:59710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014385.121:59711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014393.720:59712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014393.912:59713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014406.712:59714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014406.716:59715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014406.721:59716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014406.726:59717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014407.029:59718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014407.058:59719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014407.096:59720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014407.196:59721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014410.713:59722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014410.716:59723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014410.874:59724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014411.021:59725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014415.717:59726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014416.079:59727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014424.712:59728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014424.901:59729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014426.942:59730): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014426.942:59731): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014427.006:59732): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014427.007:59733): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014427.008:59734): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014427.013:59735): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014427.016:59736): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014427.016:59737): pid=458213 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014427.022:59738): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014427.022:59739): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014427.025:59740): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014427.025:59741): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014427.092:59742): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014427.092:59743): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014427.093:59744): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014427.096:59745): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014427.785:59746): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014427.786:59747): pid=458228 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014427.962:59748): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014427.963:59749): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014428.052:59750): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014428.052:59751): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014428.111:59752): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014428.112:59753): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014428.112:59754): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014428.115:59755): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014428.119:59756): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014428.119:59757): pid=458276 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014428.123:59758): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014428.123:59759): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014437.719:59760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014437.723:59761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014437.727:59762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014437.731:59763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014438.020:59764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014438.085:59765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014438.116:59766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014438.154:59767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014441.713:59768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014441.716:59769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014441.956:59770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014441.992:59771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014446.716:59772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014447.086:59773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014455.706:59774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014455.855:59775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014468.714:59776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014468.719:59777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014468.725:59778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014468.730:59779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014468.990:59780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014469.094:59781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014469.128:59782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014469.166:59783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014472.711:59784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014472.713:59785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014472.967:59786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014472.997:59787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014477.712:59788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014478.072:59789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014486.708:59790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014486.975:59791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014488.533:59792): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014488.533:59793): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014488.602:59794): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014488.603:59795): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014488.604:59796): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014488.610:59797): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014488.613:59798): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014488.613:59799): pid=458788 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014488.630:59800): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014488.630:59801): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014488.649:59802): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014488.649:59803): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014488.710:59804): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014488.710:59805): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014488.711:59806): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014488.714:59807): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014489.322:59808): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014489.322:59809): pid=458803 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014489.430:59810): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014489.430:59811): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014492.417:59812): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014492.417:59813): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014492.476:59814): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014492.477:59815): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014492.479:59816): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014492.483:59817): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014492.487:59818): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014492.487:59819): pid=458851 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014492.491:59820): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014492.491:59821): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014499.718:59822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014499.722:59823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014499.726:59824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014499.730:59825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014500.015:59826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014500.093:59827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014500.122:59828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014500.163:59829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014503.717:59830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014503.720:59831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014503.852:59832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014504.092:59833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014508.712:59834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014509.056:59835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014517.712:59836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014517.877:59837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014530.717:59838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014530.721:59839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014530.724:59840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014530.728:59841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014531.096:59842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014531.175:59843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014531.199:59844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014531.234:59845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014534.715:59846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014534.720:59847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014534.851:59848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014535.015:59849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014539.715:59850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014540.092:59851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014548.716:59852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014548.876:59853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014552.895:59854): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014552.895:59855): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014552.958:59856): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014552.958:59857): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014552.960:59858): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014552.965:59859): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014552.967:59860): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014552.967:59861): pid=459348 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014552.974:59862): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014552.974:59863): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014552.984:59864): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014552.984:59865): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014553.046:59866): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014553.047:59867): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014553.048:59868): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014553.050:59869): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014553.687:59870): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014553.687:59871): pid=459363 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014553.780:59872): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014553.780:59873): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014554.946:59874): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014554.946:59875): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014555.007:59876): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014555.007:59877): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014555.008:59878): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014555.011:59879): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014555.014:59880): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014555.015:59881): pid=459410 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014555.019:59882): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014555.019:59883): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014561.713:59884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014561.717:59885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014561.720:59886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014561.724:59887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014561.928:59888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014562.004:59889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014562.047:59890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014562.188:59891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014565.708:59892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014565.711:59893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014565.885:59894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014566.023:59895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014570.712:59896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014571.069:59897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014579.710:59898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014579.856:59899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014592.714:59900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014592.717:59901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014592.720:59902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014592.724:59903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014592.942:59904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014592.976:59905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014593.038:59906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014593.127:59907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014594.313:59908): pid=459789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=459789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014594.493:59909): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=459789 suid=74 rport=52020 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014594.494:59910): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=459789 suid=74 rport=52020 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014595.819:59911): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=459789 suid=74 rport=52020 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014595.819:59912): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=459789 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014595.820:59913): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=78.128.112.74 addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014595.821:59914): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=459788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014595.821:59915): pid=459788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014596.715:59916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014596.718:59917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014596.911:59918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014596.939:59919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014601.708:59920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014602.071:59921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014610.712:59922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014610.916:59923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014615.397:59924): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014615.397:59925): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014615.472:59926): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014615.473:59927): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014615.474:59928): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014615.480:59929): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014615.483:59930): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014615.483:59931): pid=459890 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014615.489:59932): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014615.489:59933): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014615.502:59934): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014615.502:59935): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014615.562:59936): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014615.562:59937): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014615.562:59938): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014615.565:59939): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014616.227:59940): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014616.227:59941): pid=459905 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014616.304:59942): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014616.304:59943): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014618.506:59944): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014618.507:59945): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014618.567:59946): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014618.567:59947): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014618.569:59948): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014618.586:59949): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014618.590:59950): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014618.590:59951): pid=459952 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014618.594:59952): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014618.594:59953): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014623.714:59954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014623.719:59955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014623.721:59956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014623.725:59957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014623.938:59958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014624.067:59959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014624.086:59960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014624.118:59961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014627.711:59962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014627.714:59963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014627.899:59964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014627.949:59965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014632.711:59966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014633.071:59967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014641.714:59968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014641.872:59969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014654.714:59970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014654.718:59971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014654.721:59972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014654.725:59973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014655.049:59974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014655.073:59975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014655.098:59976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014655.119:59977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014658.717:59978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014658.722:59979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014658.856:59980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014659.062:59981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014663.712:59982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014664.115:59983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014672.716:59984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014672.887:59985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014679.003:59986): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014679.003:59987): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014679.064:59988): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014679.065:59989): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014679.066:59990): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014679.071:59991): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014679.073:59992): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014679.074:59993): pid=460442 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014679.076:59994): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014679.076:59995): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014679.078:59996): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014679.078:59997): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014679.122:59998): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014679.123:59999): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014679.124:60000): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014679.126:60001): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014679.752:60002): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014679.753:60003): pid=460457 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014679.854:60004): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014679.855:60005): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014683.182:60006): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014683.182:60007): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014683.240:60008): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014683.240:60009): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014683.241:60010): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014683.245:60011): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014683.249:60012): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014683.249:60013): pid=460504 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014683.253:60014): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014683.253:60015): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014685.716:60016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014685.720:60017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014685.724:60018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014685.728:60019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014686.098:60020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014686.122:60021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014686.157:60022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014686.163:60023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014689.713:60024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014689.717:60025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014689.893:60026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014689.965:60027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014694.711:60028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014695.066:60029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014703.710:60030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014703.864:60031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014716.717:60032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014716.721:60033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014716.725:60034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014716.729:60035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014717.068:60036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014717.092:60037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014717.139:60038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014717.147:60039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014720.712:60040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014720.717:60041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014720.913:60042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014720.964:60043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014725.711:60044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014726.105:60045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014734.710:60046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014734.888:60047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014743.660:60048): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014743.660:60049): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014743.726:60050): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014743.726:60051): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014743.727:60052): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014743.736:60053): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014743.738:60054): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014743.739:60055): pid=461016 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014743.745:60056): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014743.745:60057): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014743.762:60058): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014743.762:60059): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014743.817:60060): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014743.817:60061): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014743.818:60062): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014743.821:60063): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014744.239:60064): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014744.239:60065): pid=461031 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014744.244:60066): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014744.244:60067): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014744.273:60068): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014744.273:60069): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014744.322:60070): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014744.322:60071): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014744.323:60072): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014744.327:60073): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014744.329:60074): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014744.329:60075): pid=461066 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014744.332:60076): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014744.332:60077): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014744.334:60078): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014744.334:60079): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014744.386:60080): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014744.386:60081): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014744.387:60082): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014744.389:60083): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014745.855:60084): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014745.855:60085): pid=461081 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014745.860:60086): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014745.860:60087): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014745.962:60088): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014745.962:60089): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014746.017:60090): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014746.017:60091): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014746.018:60092): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014746.022:60093): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014746.024:60094): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014746.025:60095): pid=461255 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014746.029:60096): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014746.029:60097): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014746.031:60098): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014746.031:60099): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014746.092:60100): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014746.092:60101): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014746.093:60102): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014746.095:60103): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014746.724:60104): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014746.724:60105): pid=461270 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014746.794:60106): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014746.794:60107): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014747.062:60108): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014747.062:60109): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014747.121:60110): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014747.121:60111): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014747.122:60112): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014747.143:60113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014747.147:60114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014747.152:60115): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014747.153:60116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014747.157:60117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014747.157:60118): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014747.158:60119): pid=461317 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014747.162:60120): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014747.162:60121): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014747.466:60122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014747.505:60123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014747.544:60124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014747.583:60125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014747.646:60126): pid=461450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014747.752:60127): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=461450 suid=74 rport=55118 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014747.753:60128): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=461450 suid=74 rport=55118 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014748.388:60129): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461450 suid=74 rport=55118 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014748.388:60130): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461450 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014748.389:60131): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.93.119 addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014748.389:60132): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014748.390:60133): pid=461449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014751.714:60134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014751.718:60135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014751.845:60136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014752.082:60137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014756.710:60138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014757.013:60139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014765.709:60140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014765.894:60141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014777.720:60142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014777.724:60143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014777.728:60144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014777.732:60145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014778.029:60146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014778.050:60147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014778.138:60148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014778.282:60149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014782.713:60150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014782.718:60151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014782.879:60152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014782.996:60153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014787.711:60154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014788.062:60155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014796.709:60156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014796.877:60157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014798.232:60158): pid=461814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014798.233:60159): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461814 suid=74 rport=25072 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014798.233:60160): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461814 suid=74 rport=25072 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014799.899:60161): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461814 suid=74 rport=25072 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014799.900:60162): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461814 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014799.900:60163): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014799.901:60164): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014799.901:60165): pid=461813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014800.326:60166): pid=461816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014800.327:60167): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461816 suid=74 rport=25076 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014800.327:60168): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461816 suid=74 rport=25076 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014802.020:60169): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461816 suid=74 rport=25076 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014802.020:60170): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461816 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014802.021:60171): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014802.021:60172): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014802.021:60173): pid=461815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014802.463:60174): pid=461818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014802.465:60175): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461818 suid=74 rport=25090 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014802.465:60176): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461818 suid=74 rport=25090 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014804.424:60177): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461818 suid=74 rport=25090 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014804.425:60178): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461818 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014804.425:60179): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014804.426:60180): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014804.426:60181): pid=461817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014805.029:60182): pid=461820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014805.030:60183): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461820 suid=74 rport=39550 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014805.031:60184): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461820 suid=74 rport=39550 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014806.335:60185): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461820 suid=74 rport=39550 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014806.335:60186): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461820 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014806.336:60187): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014806.336:60188): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014806.336:60189): pid=461819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014806.630:60190): pid=461822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014806.829:60191): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461822 suid=74 rport=39554 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014806.830:60192): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=461822 suid=74 rport=39554 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765014807.534:60193): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014807.534:60194): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014807.600:60195): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014807.600:60196): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014807.601:60197): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014807.606:60198): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014807.608:60199): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014807.608:60200): pid=461823 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014807.612:60201): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014807.613:60202): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014807.615:60203): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014807.616:60204): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014807.679:60205): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014807.680:60206): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014807.680:60207): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014807.683:60208): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765014808.037:60209): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461822 suid=74 rport=39554 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014808.038:60210): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461822 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014808.038:60211): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014808.039:60212): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=461821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014808.039:60213): pid=461821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014808.060:60214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014808.066:60215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014808.183:60216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014808.299:60217): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014808.300:60218): pid=461838 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014808.307:60219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014808.346:60220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014808.347:60221): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014808.347:60222): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014808.464:60223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014808.606:60224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014808.690:60225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014812.697:60226): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014812.697:60227): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014812.763:60228): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014812.764:60229): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014812.766:60230): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014812.771:60231): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014812.775:60232): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014812.775:60233): pid=461998 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014812.779:60234): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014812.779:60235): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014813.442:60236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014813.446:60237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014813.677:60238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014813.729:60239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014818.713:60240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014819.092:60241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014827.387:60242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014827.561:60243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014838.715:60244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014838.718:60245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014838.721:60246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014838.725:60247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014839.046:60248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014839.123:60249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014839.143:60250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014839.163:60251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014843.709:60252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014843.820:60253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014843.864:60254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014844.053:60255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014849.709:60256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014850.041:60257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014857.711:60258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014857.888:60259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014869.713:60260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014869.717:60261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014869.720:60262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014869.723:60263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014870.055:60264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014870.070:60265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014870.089:60266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014870.104:60267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014873.231:60268): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014873.231:60269): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014873.297:60270): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014873.298:60271): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014873.300:60272): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014873.305:60273): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014873.309:60274): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014873.309:60275): pid=462494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014873.314:60276): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014873.314:60277): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014873.320:60278): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014873.320:60279): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014873.386:60280): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014873.386:60281): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014873.387:60282): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014873.389:60283): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014874.014:60284): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014874.015:60285): pid=462509 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014874.214:60286): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014874.214:60287): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014874.305:60288): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014874.305:60289): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014874.363:60290): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014874.363:60291): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014874.364:60292): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014874.379:60293): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014874.382:60294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014874.383:60295): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014874.383:60296): pid=462592 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014874.385:60297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014874.388:60298): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014874.388:60299): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014874.490:60300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014874.593:60301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014880.717:60302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014881.090:60303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014888.714:60304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014888.903:60305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014900.710:60306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014900.714:60307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014900.718:60308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014900.721:60309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014901.066:60310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014901.085:60311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014901.118:60312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014901.163:60313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014904.712:60314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014904.716:60315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014904.905:60316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014904.940:60317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014911.711:60318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014912.074:60319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014919.711:60320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014919.887:60321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014932.150:60322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014932.153:60323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014932.159:60324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014932.163:60325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014932.350:60326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014932.397:60327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014932.437:60328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014932.625:60329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014934.813:60330): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014934.813:60331): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014934.882:60332): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014934.882:60333): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014934.883:60334): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014934.889:60335): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014934.891:60336): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014934.891:60337): pid=463076 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014934.896:60338): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014934.896:60339): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014934.913:60340): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014934.913:60341): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014934.972:60342): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014934.973:60343): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014934.973:60344): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014934.996:60345): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014934.998:60346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014935.002:60347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014935.216:60348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014935.238:60349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014935.653:60350): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014935.653:60351): pid=463091 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014935.682:60352): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014935.682:60353): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014937.484:60354): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014937.484:60355): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014937.550:60356): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014937.550:60357): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014937.551:60358): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014937.555:60359): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.558:60360): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014937.558:60361): pid=463186 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.561:60362): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014937.561:60363): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014942.710:60364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014943.085:60365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014950.711:60366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014950.899:60367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014962.719:60368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014962.721:60369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014962.724:60370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014962.726:60371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014963.032:60372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014963.043:60373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014963.099:60374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014963.153:60375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014965.714:60376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014965.718:60377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014965.920:60378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014965.940:60379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014973.718:60380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014974.079:60381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014981.716:60382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014981.901:60383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014993.715:60384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014993.719:60385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014993.722:60386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014993.726:60387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014994.084:60388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014994.113:60389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014994.164:60390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014994.216:60391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014996.714:60392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014996.717:60393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014996.946:60394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014996.978:60395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014997.975:60396): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014997.975:60397): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014998.033:60398): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014998.034:60399): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014998.035:60400): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014998.039:60401): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.041:60402): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014998.042:60403): pid=463680 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.047:60404): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014998.047:60405): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014998.051:60406): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014998.051:60407): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014998.110:60408): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014998.110:60409): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014998.110:60410): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014998.113:60411): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.781:60412): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014998.781:60413): pid=463695 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.954:60414): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014998.954:60415): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014999.150:60416): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014999.150:60417): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014999.215:60418): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014999.215:60419): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014999.216:60420): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014999.221:60421): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014999.224:60422): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014999.224:60423): pid=463741 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014999.229:60424): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014999.229:60425): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015004.710:60426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015005.007:60427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015012.711:60428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015012.891:60429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015024.711:60430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015024.714:60431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015024.718:60432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015024.720:60433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015025.042:60434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015025.081:60435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015025.149:60436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015025.214:60437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015027.711:60438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015027.715:60439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015027.929:60440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015027.958:60441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015035.715:60442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015036.091:60443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015043.712:60444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015043.896:60445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015055.713:60446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015055.716:60447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015055.720:60448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015055.723:60449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015056.038:60450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015056.064:60451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015056.080:60452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015056.130:60453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015058.717:60454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015058.720:60455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015058.903:60456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015058.972:60457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015059.649:60458): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015059.649:60459): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015059.713:60460): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015059.714:60461): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015059.715:60462): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015059.721:60463): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015059.724:60464): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015059.724:60465): pid=464252 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015059.729:60466): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015059.729:60467): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015059.753:60468): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015059.753:60469): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015059.815:60470): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015059.815:60471): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015059.816:60472): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015059.818:60473): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.496:60474): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015060.496:60475): pid=464267 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.671:60476): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015060.671:60477): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015060.769:60478): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015060.769:60479): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015060.819:60480): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015060.819:60481): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015060.820:60482): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015060.825:60483): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.828:60484): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015060.828:60485): pid=464315 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.832:60486): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015060.832:60487): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015066.712:60488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015067.024:60489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765015071.369:60490): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29001 suid=1002 rport=49504 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.369:60491): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29001 suid=1002 rport=49504 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.374:60492): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=28981 suid=1002 rport=49486 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.374:60493): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=28981 suid=1002 rport=49486 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.385:60494): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29001 suid=1002 rport=49504 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.389:60495): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=28981 suid=1002 rport=49486 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.390:60496): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29294 suid=1002 rport=49516 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.390:60497): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29294 suid=1002 rport=49516 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.402:60498): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29001 suid=1002 rport=49504 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.407:60499): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29389 suid=1002 rport=57606 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.408:60500): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29389 suid=1002 rport=57606 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.412:60501): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29370 suid=1002 rport=57590 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.412:60502): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29370 suid=1002 rport=57590 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.416:60503): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29351 suid=1002 rport=57576 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.416:60504): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29351 suid=1002 rport=57576 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.420:60505): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=28981 suid=1002 rport=49486 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.427:60506): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29294 suid=1002 rport=49516 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.427:60507): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29406 suid=1002 rport=57622 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.427:60508): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29406 suid=1002 rport=57622 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.429:60509): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29332 suid=1002 rport=49536 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.429:60510): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29332 suid=1002 rport=49536 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.433:60511): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29313 suid=1002 rport=49530 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.433:60512): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29313 suid=1002 rport=49530 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.443:60513): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29389 suid=1002 rport=57606 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.445:60514): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29370 suid=1002 rport=57590 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.447:60515): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29351 suid=1002 rport=57576 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.452:60516): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29389 suid=1002 rport=57606 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.454:60517): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29294 suid=1002 rport=49516 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.460:60518): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29406 suid=1002 rport=57622 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.461:60519): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29332 suid=1002 rport=49536 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.466:60520): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29313 suid=1002 rport=49530 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.475:60521): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29020 suid=1002 rport=49506 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.476:60522): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29020 suid=1002 rport=49506 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.483:60523): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29406 suid=1002 rport=57622 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.488:60524): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29332 suid=1002 rport=49536 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.493:60525): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29370 suid=1002 rport=57590 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.499:60526): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29351 suid=1002 rport=57576 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.507:60527): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=28982 suid=1002 rport=49502 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015071.507:60528): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=28982 suid=1002 rport=49502 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.519:60529): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29313 suid=1002 rport=49530 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.527:60530): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29020 suid=1002 rport=49506 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.530:60531): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=28982 suid=1002 rport=49502 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.535:60532): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=28982 suid=1002 rport=49502 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015071.539:60533): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29020 suid=1002 rport=49506 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_START msg=audit(1765015074.711:60534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765015074.842:60535): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29425 suid=1002 rport=57624 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015074.842:60536): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=29425 suid=1002 rport=57624 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015074.852:60537): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=29425 suid=1002 rport=57624 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015074.856:60538): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=29425 suid=1002 rport=57624 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015074.903:60539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015086.719:60540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015086.722:60541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015086.725:60542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015086.729:60543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015087.058:60544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015087.090:60545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015087.110:60546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015087.124:60547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015089.712:60548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015089.716:60549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015089.921:60550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015090.009:60551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015097.518:60552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015097.873:60553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015105.710:60554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015105.866:60555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015117.712:60556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015117.715:60557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015117.719:60558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015117.722:60559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.046:60560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.071:60561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.078:60562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.111:60563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015120.718:60564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015120.721:60565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015120.835:60566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015121.032:60567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015121.278:60568): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015121.278:60569): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015121.347:60570): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015121.348:60571): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015121.349:60572): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015121.354:60573): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015121.357:60574): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015121.357:60575): pid=464809 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015121.361:60576): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015121.361:60577): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015121.367:60578): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015121.367:60579): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015121.427:60580): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015121.427:60581): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015121.428:60582): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015121.431:60583): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.091:60584): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015122.091:60585): pid=464824 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.191:60586): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015122.191:60587): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015122.399:60588): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015122.399:60589): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015122.459:60590): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015122.459:60591): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015122.460:60592): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015122.462:60593): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.465:60594): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015122.465:60595): pid=464870 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.471:60596): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015122.471:60597): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015122.473:60598): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015122.473:60599): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015122.532:60600): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015122.532:60601): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015122.533:60602): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015122.536:60603): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.895:60604): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015122.895:60605): pid=464885 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.899:60606): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015122.899:60607): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015122.959:60608): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015122.960:60609): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015122.996:60610): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015122.996:60611): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015122.997:60612): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015122.999:60613): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015123.001:60614): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015123.001:60615): pid=464918 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015123.005:60616): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015123.005:60617): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015128.711:60618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015129.053:60619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015136.710:60620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015136.898:60621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015148.718:60622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015148.721:60623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015148.725:60624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015148.728:60625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.012:60626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.083:60627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.106:60628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.322:60629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015151.713:60630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015151.718:60631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015151.880:60632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015152.048:60633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015159.712:60634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015160.073:60635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015167.711:60636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015167.874:60637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015179.714:60638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015179.717:60639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015179.720:60640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015179.724:60641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.040:60642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.072:60643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.102:60644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.130:60645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015182.712:60646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015182.716:60647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015182.929:60648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015182.978:60649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015183.443:60650): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015183.443:60651): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015183.518:60652): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015183.518:60653): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015183.520:60654): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015183.525:60655): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015183.529:60656): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015183.529:60657): pid=465413 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015183.538:60658): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015183.538:60659): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015183.564:60660): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015183.564:60661): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015183.628:60662): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015183.628:60663): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015183.629:60664): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015183.632:60665): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.315:60666): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015184.316:60667): pid=465428 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.421:60668): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015184.421:60669): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015184.528:60670): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015184.528:60671): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015184.577:60672): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015184.578:60673): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015184.578:60674): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015184.581:60675): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.583:60676): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015184.584:60677): pid=465475 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.587:60678): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015184.587:60679): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015184.591:60680): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015184.591:60681): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015184.636:60682): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015184.636:60683): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520636570682D766F6C756D65202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538202D2D20696E76656E746F7279202D2D666F726D61743D6A736F6E2D707265747479202D2D66696C7465722D666F722D6261746368 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015184.638:60684): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015184.639:60685): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015185.432:60686): prog-id=2375 op=LOAD
type=SYSCALL msg=audit(1765015185.432:60686): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe77725840 a2=90 a3=9500000000 items=0 ppid=465562 pid=465563 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015185.432:60686): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376636303063623630643062363931336131656565366630633836306664
type=BPF msg=audit(1765015185.497:60687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015185.895:60688): prog-id=2376 op=LOAD
type=SYSCALL msg=audit(1765015185.895:60688): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffca1ed5210 a2=90 a3=9500000001 items=0 ppid=465605 pid=465606 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015185.895:60688): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313938666335363936326262626363383164613964653730353337646235
type=BPF msg=audit(1765015186.979:60689): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015187.117:60690): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015187.117:60691): pid=465490 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015187.123:60692): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015187.123:60693): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015187.741:60694): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015187.741:60695): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015187.807:60696): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015187.807:60697): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015187.808:60698): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015187.813:60699): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015187.816:60700): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015187.816:60701): pid=466615 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015187.820:60702): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015187.821:60703): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015190.711:60704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015191.131:60705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015198.715:60706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015198.880:60707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015210.715:60708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015210.718:60709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015210.723:60710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015210.727:60711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.006:60712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.071:60713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.092:60714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.222:60715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015213.717:60716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015213.720:60717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015213.873:60718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015213.998:60719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015221.711:60720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015222.095:60721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015229.711:60722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015229.889:60723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015241.712:60724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015241.715:60725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015241.719:60726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015241.722:60727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.001:60728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.080:60729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.117:60730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.140:60731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015244.713:60732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015244.716:60733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015244.904:60734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015245.014:60735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015248.262:60736): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015248.262:60737): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015248.334:60738): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015248.334:60739): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015248.336:60740): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015248.341:60741): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015248.344:60742): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015248.344:60743): pid=467101 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015248.349:60744): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015248.349:60745): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015248.368:60746): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015248.368:60747): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015248.427:60748): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015248.428:60749): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015248.429:60750): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015248.432:60751): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015249.132:60752): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015249.132:60753): pid=467116 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015249.350:60754): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015249.351:60755): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015251.758:60756): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015251.758:60757): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015251.818:60758): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015251.819:60759): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015251.819:60760): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015251.822:60761): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015251.826:60762): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015251.826:60763): pid=467164 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015251.830:60764): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015251.830:60765): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015252.708:60766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015253.077:60767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015260.711:60768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015260.861:60769): pid=467233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015260.862:60770): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=467233 suid=74 rport=54478 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015260.862:60771): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=467233 suid=74 rport=54478 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765015260.868:60772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765015260.928:60773): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765015260.942:60774): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015260.942:60775): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015260.972:60776): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015260.973:60777): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467233 suid=74 rport=54478 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015260.975:60778): pid=467231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015260.975:60779): pid=467231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=248 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765015260.975:60779): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff4aedb9e0 a2=4 a3=3e8 items=0 ppid=409081 pid=467231 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=248 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015260.975:60779): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015260.977:60780): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1765015261.034:60781): pid=467235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765015261.034:60782): pid=467235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765015261.035:60783): pid=467235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015261.035:60784): pid=467235 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=249 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765015261.035:60784): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe34f5ff60 a2=4 a3=3e8 items=0 ppid=1 pid=467235 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=249 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015261.035:60784): proctitle="(systemd)"
type=USER_START msg=audit(1765015261.037:60785): pid=467235 uid=0 auid=1000 ses=249 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765015261.201:60786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015261.226:60787): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015261.228:60788): pid=467262 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765015261.229:60789): pid=467262 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765015261.273:60790): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015261.273:60791): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015261.274:60792): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015261.332:60793): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015261.332:60794): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6679706B78796D6C6C6B69676A627777786E75686F69646E6462697868776574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015261.334:60795): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015261.338:60796): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015263.761:60797): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015263.762:60798): pid=467276 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015263.766:60799): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015263.767:60800): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765015272.711:60801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015272.715:60802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015272.719:60803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015272.722:60804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015272.995:60805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015273.104:60806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015273.144:60807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015273.149:60808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015275.709:60809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015275.712:60810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015275.918:60811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015275.939:60812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015281.528:60813): pid=467452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015281.530:60814): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=467452 suid=74 rport=46422 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015281.530:60815): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=467452 suid=74 rport=46422 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015281.606:60816): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015281.606:60817): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015281.638:60818): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015281.639:60819): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467452 suid=74 rport=46422 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015281.641:60820): pid=467451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015281.642:60821): pid=467451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=250 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015281.642:60821): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc04e412a0 a2=4 a3=3eb items=0 ppid=409081 pid=467451 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015281.642:60821): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015281.644:60822): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015281.702:60823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015281.753:60824): pid=467455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765015281.753:60825): pid=467455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765015281.754:60826): pid=467455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015281.755:60827): pid=467455 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=251 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015281.755:60827): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe34f5ff60 a2=4 a3=3eb items=0 ppid=1 pid=467455 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=251 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015281.755:60827): proctitle="(systemd)"
type=USER_START msg=audit(1765015281.757:60828): pid=467455 uid=0 auid=1003 ses=251 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015281.927:60829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015281.951:60830): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015281.952:60831): pid=467471 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015281.953:60832): pid=467471 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015281.996:60833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015281.997:60834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015281.998:60835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467472 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.025:60836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.025:60837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.036:60838): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.036:60839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.037:60840): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467485 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.079:60841): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.079:60842): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.382:60843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.382:60844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.384:60845): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467504 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.419:60846): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.420:60847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.432:60848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.432:60849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.434:60850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467519 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.522:60851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.522:60852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.541:60853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.541:60854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.542:60855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467533 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.613:60856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.614:60857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.628:60858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.628:60859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.630:60860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467546 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015282.665:60861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015282.665:60862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015282.680:60863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015282.680:60864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015282.682:60865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467560 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015283.715:60866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015284.073:60867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015285.935:60868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015285.935:60869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015285.960:60870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015285.960:60871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015285.962:60872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467721 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015285.997:60873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015285.997:60874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.107:60875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.107:60876): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.109:60877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467735 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.139:60878): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.139:60879): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.152:60880): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.152:60881): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.153:60882): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467748 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.193:60883): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.193:60884): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.382:60885): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.382:60886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.384:60887): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467767 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.429:60888): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.429:60889): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.450:60890): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.450:60891): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.452:60892): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467780 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.482:60893): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.482:60894): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.499:60895): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.500:60896): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.502:60897): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467794 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015286.573:60898): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015286.573:60899): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7964627263747A6C77666B7578706973687576726969736B7367636C6C6B65203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353238362E313437393539372D35393835392D3132393333333635353232373139382F416E736962616C6C5A5F66696E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015286.574:60900): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015286.579:60901): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015286.756:60902): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015286.757:60903): pid=467809 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015286.760:60904): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.761:60905): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.779:60906): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.779:60907): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.780:60908): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467812 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.806:60909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.806:60910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.924:60911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.924:60912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.925:60913): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467826 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015286.955:60914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015286.955:60915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015286.968:60916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015286.968:60917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015286.970:60918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467839 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015287.005:60919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015287.005:60920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015287.170:60921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015287.170:60922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015287.172:60923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467858 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015287.218:60924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015287.219:60925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015287.237:60926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015287.237:60927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015287.239:60928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467871 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015287.269:60929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015287.270:60930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015287.284:60931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015287.284:60932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015287.286:60933): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467885 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015287.341:60934): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015287.341:60935): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6768657A726776696273626D79767A797A736E616D656C636A65796169666A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353238362E393633353438342D35393837322D36323832333136373634323134392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015287.342:60936): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015287.344:60937): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015289.161:60938): prog-id=2377 op=LOAD
type=SYSCALL msg=audit(1765015289.161:60938): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc0f651730 a2=90 a3=9500000000 items=0 ppid=468046 pid=468047 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015289.161:60938): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333462633365373734376266623039353839346530633235306530353232
type=BPF msg=audit(1765015289.215:60939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015289.577:60940): prog-id=2378 op=LOAD
type=SYSCALL msg=audit(1765015289.577:60940): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd7871e350 a2=90 a3=9500000001 items=0 ppid=468089 pid=468090 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015289.577:60940): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666664616438333632376337663839613263383731663237316333623564
type=BPF msg=audit(1765015290.024:60941): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015290.124:60942): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015290.124:60943): pid=467900 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015290.128:60944): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015290.128:60945): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015290.141:60946): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015290.141:60947): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015290.143:60948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468131 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015290.168:60949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015290.169:60950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015290.271:60951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015290.272:60952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015290.273:60953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468145 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015290.303:60954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015290.303:60955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015290.315:60956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015290.315:60957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015290.317:60958): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468158 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015290.352:60959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015290.352:60960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015290.370:60961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015290.371:60962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015290.372:60963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468177 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015290.416:60964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015290.416:60965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015291.251:60966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015291.251:60967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015291.252:60968): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468190 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015291.274:60969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015291.275:60970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015291.291:60971): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015291.291:60972): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015291.292:60973): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468204 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015291.335:60974): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015291.335:60975): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6C6477776765766B7A74686970676570707A6B7071656979707662727068203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353239302E333131363236322D35393838352D3237333737373834373234393331352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015291.337:60976): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015291.356:60977): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015291.358:60978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015291.547:60979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015293.169:60980): prog-id=2379 op=LOAD
type=SYSCALL msg=audit(1765015293.169:60980): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeaef3cc60 a2=90 a3=9500000000 items=0 ppid=468388 pid=468389 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015293.169:60980): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373866393636363730316531376266666133643263353863633135666336
type=BPF msg=audit(1765015293.220:60981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015293.579:60982): prog-id=2380 op=LOAD
type=SYSCALL msg=audit(1765015293.579:60982): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe15ed7da0 a2=90 a3=9500000001 items=0 ppid=468428 pid=468429 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015293.579:60982): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653934646635396461333264373830303331373065373234376336386534
type=BPF msg=audit(1765015293.993:60983): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015294.142:60984): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015294.142:60985): pid=468219 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015294.148:60986): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.148:60987): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.158:60988): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.158:60989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.160:60990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468467 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015294.188:60991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.188:60992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.380:60993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.380:60994): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.381:60995): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468481 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015294.411:60996): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.411:60997): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.422:60998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.422:60999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.424:61000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468494 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015294.459:61001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.459:61002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.480:61003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.480:61004): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.481:61005): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468513 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015294.525:61006): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.525:61007): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.537:61008): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.537:61009): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.539:61010): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468526 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015294.568:61011): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015294.568:61012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015294.585:61013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015294.585:61014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015294.587:61015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468540 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015294.657:61016): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015294.657:61017): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666F6A6C6E6A6D6876626776756177677A7A6D71617676686E61776C7A6C79203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353239342E3431393138332D35393930302D3230313733353237343235373230362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015294.659:61018): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015294.664:61019): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015296.490:61020): prog-id=2381 op=LOAD
type=SYSCALL msg=audit(1765015296.490:61020): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffccfd29860 a2=90 a3=9500000000 items=0 ppid=468736 pid=468737 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015296.490:61020): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356438643133306231333461643862313734343430333438343465386439
type=BPF msg=audit(1765015296.550:61021): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015296.899:61022): prog-id=2382 op=LOAD
type=SYSCALL msg=audit(1765015296.899:61022): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc76cb24c0 a2=90 a3=9500000001 items=0 ppid=468777 pid=468778 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015296.899:61022): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393465313564323431656161663039366334613062613963653032376166
type=BPF msg=audit(1765015297.320:61023): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015297.480:61024): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015297.481:61025): pid=468555 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015297.486:61026): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.486:61027): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.505:61028): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.505:61029): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.507:61030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468819 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015297.539:61031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.539:61032): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.645:61033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.645:61034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.647:61035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468833 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015297.676:61036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.676:61037): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.688:61038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.688:61039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.689:61040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468846 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015297.725:61041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.725:61042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.742:61043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.743:61044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.744:61045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468865 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015297.786:61046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.786:61047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.799:61048): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.800:61049): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.801:61050): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468878 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015297.830:61051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015297.831:61052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015297.846:61053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015297.846:61054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015297.847:61055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=468892 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015297.903:61056): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015297.903:61057): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66776674627478727561746977616B666C747773776D796C6D6A736F6B727063203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353239372E363833363630372D35393931332D3237353136323330333036303730342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015297.904:61058): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015297.909:61059): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015299.689:61060): prog-id=2383 op=LOAD
type=SYSCALL msg=audit(1765015299.689:61060): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe402d43f0 a2=90 a3=9500000000 items=0 ppid=469053 pid=469054 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015299.689:61060): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326239653833383962353134373335333361323435656531336363366430
type=BPF msg=audit(1765015299.737:61061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015300.109:61062): prog-id=2384 op=LOAD
type=SYSCALL msg=audit(1765015300.109:61062): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc1461df80 a2=90 a3=9500000001 items=0 ppid=469095 pid=469096 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015300.109:61062): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373163643362656531353830316637303735313934626162393566663330
type=BPF msg=audit(1765015300.584:61063): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015300.705:61064): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015300.705:61065): pid=468907 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015300.710:61066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015300.710:61067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015300.723:61068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015300.723:61069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015300.724:61070): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469136 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015300.752:61071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015300.752:61072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015300.945:61073): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015300.945:61074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015300.947:61075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469150 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015300.974:61076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015300.974:61077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015300.987:61078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015300.987:61079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015300.988:61080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469163 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015301.017:61081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015301.017:61082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015301.041:61083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015301.041:61084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015301.042:61085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469182 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015301.099:61086): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015301.099:61087): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015301.113:61088): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015301.113:61089): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015301.114:61090): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469195 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015301.146:61091): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015301.146:61092): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015301.165:61093): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015301.165:61094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015301.167:61095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469209 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015301.230:61096): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015301.230:61097): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74627363736E626A616E697076636B726F6F6B6D66717769646A6C7669737669203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353330302E3938313432362D35393933302D3136313039303639323735363134372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015301.231:61098): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015301.235:61099): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015303.018:61100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015303.034:61101): prog-id=2385 op=LOAD
type=SYSCALL msg=audit(1765015303.034:61101): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff21c4e7e0 a2=90 a3=9500000000 items=0 ppid=469369 pid=469371 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015303.034:61101): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356138386261373632656531356364323332343662393136386239636364
type=BPF msg=audit(1765015303.079:61102): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015303.144:61103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015303.153:61104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015303.160:61105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015303.264:61106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015303.487:61107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015303.509:61108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015303.511:61109): prog-id=2386 op=LOAD
type=SYSCALL msg=audit(1765015303.511:61109): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdcc02ed60 a2=90 a3=9500000001 items=0 ppid=469523 pid=469524 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015303.511:61109): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623233386139313563363237353565623064386264383632313937663863
type=SERVICE_STOP msg=audit(1765015303.588:61110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015304.020:61111): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015304.203:61112): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015304.204:61113): pid=469224 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015304.211:61114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015304.211:61115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015304.232:61116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015304.232:61117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015304.235:61118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469564 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015304.271:61119): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015304.271:61120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015305.302:61121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015305.302:61122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015305.304:61123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469578 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015305.336:61124): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015305.336:61125): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015305.350:61126): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015305.350:61127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015305.352:61128): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469591 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015305.389:61129): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015305.389:61130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015305.410:61131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015305.410:61132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015305.412:61133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469610 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015305.462:61134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015305.463:61135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015305.477:61136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015305.477:61137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015305.479:61138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469623 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015305.513:61139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015305.514:61140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015305.529:61141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015305.529:61142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015305.531:61143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469637 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015305.609:61144): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015305.609:61145): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E72767962687377736D6A6E6464656170706B6973677A6A62776E666C6167203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353330352E3334333734362D35393938392D37333331383039333439303432312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015305.610:61146): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015305.617:61147): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015305.922:61148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015305.929:61149): prog-id=2387 op=LOAD
type=SYSCALL msg=audit(1765015305.929:61149): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc8d8d8c90 a2=90 a3=9500000000 items=0 ppid=469669 pid=469670 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015305.929:61149): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303561396138343236623733613236386633393466363165313665633863
type=SERVICE_START msg=audit(1765015305.975:61150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015306.068:61151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015306.259:61152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015306.353:61153): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015306.465:61154): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015306.465:61155): pid=469652 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015306.470:61156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.470:61157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.489:61158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.489:61159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.491:61160): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015306.521:61161): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.521:61162): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.703:61163): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.703:61164): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.705:61165): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015306.737:61166): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.737:61167): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.758:61168): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.758:61169): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.759:61170): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469783 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015306.796:61171): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.796:61172): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.828:61173): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.829:61174): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.830:61175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469802 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015306.874:61176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.874:61177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.890:61178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.890:61179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.892:61180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469815 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015306.920:61181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015306.921:61182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015306.941:61183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015306.942:61184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015306.944:61185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469829 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015307.010:61186): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015307.010:61187): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D697A69776762767A7073616D69617176627861746C7972767576616B626C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353330362E373434333330342D36303030362D3233353833303932353634383138332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015307.012:61188): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015307.020:61189): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015307.377:61190): prog-id=2388 op=LOAD
type=SYSCALL msg=audit(1765015307.377:61190): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff58910220 a2=90 a3=9500000000 items=0 ppid=469861 pid=469862 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015307.377:61190): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353136663166383935383733303534626165613032306438656562626333
type=BPF msg=audit(1765015307.839:61191): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015307.928:61192): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015307.928:61193): pid=469844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015307.933:61194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015307.933:61195): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015307.951:61196): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015307.951:61197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015307.952:61198): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469900 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015307.978:61199): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015307.979:61200): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015308.049:61201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015308.049:61202): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015308.050:61203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469914 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015308.076:61204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015308.076:61205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015308.100:61206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015308.100:61207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015308.102:61208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469927 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015308.139:61209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015308.140:61210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015308.167:61211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015308.167:61212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015308.169:61213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469946 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015308.217:61214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015308.217:61215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015308.234:61216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015308.234:61217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015308.235:61218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469959 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015308.267:61219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015308.267:61220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015308.283:61221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015308.283:61222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015308.285:61223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=469973 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015308.350:61224): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015308.350:61225): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76697A75786D78667669686F6C6672716C7277666B697075647A797970786E6C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353330382E3038343633332D36303031352D31343333373932343635343537322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015308.351:61226): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015308.355:61227): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015308.712:61228): prog-id=2389 op=LOAD
type=SYSCALL msg=audit(1765015308.712:61228): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2508b240 a2=90 a3=9500000000 items=0 ppid=470005 pid=470006 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015308.712:61228): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613664356561386634383861306132623762323863326230643330653866
type=USER_LOGIN msg=audit(1765015308.971:61229): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015308.971:61230): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.034:61231): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.034:61232): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.035:61233): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.038:61234): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.042:61235): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015309.042:61236): pid=470029 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.047:61237): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015309.047:61238): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015309.215:61239): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015309.336:61240): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015309.337:61241): pid=469988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015309.341:61242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015309.341:61243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015309.356:61244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015309.357:61245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015309.359:61246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015309.392:61247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015309.392:61248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015309.544:61249): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015309.544:61250): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.605:61251): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.605:61252): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.607:61253): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.610:61254): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.613:61255): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015309.613:61256): pid=470074 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.618:61257): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015309.619:61258): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015309.651:61259): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015309.651:61260): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.711:61261): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.711:61262): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.712:61263): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.714:61264): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.376:61265): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015310.376:61266): pid=470089 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.427:61267): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015310.427:61268): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015310.664:61269): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015310.664:61270): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015310.727:61271): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015310.727:61272): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015310.728:61273): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015310.731:61274): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.734:61275): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015310.734:61276): pid=470137 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.738:61277): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015310.738:61278): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015314.712:61279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015315.073:61280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015319.102:61281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015319.102:61282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015319.103:61283): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470180 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015319.132:61284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015319.132:61285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015319.148:61286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015319.148:61287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015319.176:61288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470193 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015319.210:61289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015319.210:61290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015319.233:61291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015319.233:61292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015319.235:61293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470212 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015319.279:61294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015319.279:61295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015319.295:61296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015319.295:61297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015319.296:61298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470225 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015319.328:61299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015319.329:61300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015319.346:61301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015319.346:61302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015319.349:61303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470239 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015319.417:61304): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015319.417:61305): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7673667663786E7176706C6168676F617378746664776176726F76686F7869203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353331392E313431343930352D36303135392D31353931333730383336343332362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015319.418:61306): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015319.422:61307): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015319.774:61308): prog-id=2390 op=LOAD
type=SYSCALL msg=audit(1765015319.774:61308): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff89df17e0 a2=90 a3=9500000000 items=0 ppid=470271 pid=470272 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015319.774:61308): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656336303763353665613334363134653935646131613636326461306439
type=USER_LOGIN msg=audit(1765015320.283:61309): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015320.283:61310): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015320.295:61311): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015320.355:61312): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015320.356:61313): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015320.358:61314): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015320.364:61315): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015320.370:61316): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015320.370:61317): pid=470297 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015320.374:61318): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015320.374:61319): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015320.480:61320): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015320.480:61321): pid=470254 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015320.486:61322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.486:61323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.500:61324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.500:61325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.503:61326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470327 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015320.538:61327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.538:61328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.565:61329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.565:61330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.566:61331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470341 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015320.599:61332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.599:61333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.612:61334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.612:61335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.614:61336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470354 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015320.650:61337): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.650:61338): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.666:61339): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.666:61340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.668:61341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470373 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015320.728:61342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.728:61343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.744:61344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.744:61345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.746:61346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470386 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015320.782:61347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015320.782:61348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.804:61349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015320.804:61350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015320.806:61351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470400 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015320.877:61352): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015320.878:61353): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E746275676E68766B7761647976656C6273696F7967636F70716A726D6C6378203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353332302E363037323538332D36303135392D3137313438353131313739313231342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015320.879:61354): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015320.881:61355): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015321.205:61356): prog-id=2391 op=LOAD
type=SYSCALL msg=audit(1765015321.205:61356): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed6fe04d0 a2=90 a3=9500000000 items=0 ppid=470432 pid=470433 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015321.205:61356): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623333636233353764373163643234613461626235643237663239366464
type=BPF msg=audit(1765015321.618:61357): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015321.622:61358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015321.656:61359): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015321.656:61360): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015321.724:61361): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015321.725:61362): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015321.725:61363): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015321.730:61364): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015321.735:61365): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015321.735:61366): pid=470474 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015321.738:61367): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015321.738:61368): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015321.802:61369): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015321.802:61370): pid=470415 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015321.807:61371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015321.807:61372): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015321.813:61373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015321.820:61374): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015321.820:61375): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015321.822:61376): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470510 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015321.857:61377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015321.857:61378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015321.882:61379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015321.882:61380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015321.883:61381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470524 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015321.911:61382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015321.911:61383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015321.924:61384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015321.924:61385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015321.926:61386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470537 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015321.965:61387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015321.965:61388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015321.981:61389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015321.981:61390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015321.983:61391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470556 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015322.026:61392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015322.026:61393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015322.040:61394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015322.040:61395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015322.041:61396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470569 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015322.071:61397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015322.071:61398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015322.092:61399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015322.092:61400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015322.094:61401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470583 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015322.165:61402): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015322.165:61403): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A746A786F66756464616562787665697863666E68616F756A736469776D64203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353332312E393139353930372D36303135392D38303235373131353436313134312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015322.167:61404): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015322.171:61405): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015322.485:61406): prog-id=2392 op=LOAD
type=SYSCALL msg=audit(1765015322.485:61406): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc18f7e860 a2=90 a3=9500000000 items=0 ppid=470615 pid=470616 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015322.485:61406): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663763393165303338643039616330336237353939646233393132653462
type=BPF msg=audit(1765015322.908:61407): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015322.913:61408): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015322.913:61409): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015322.967:61410): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015322.968:61411): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015322.968:61412): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015322.971:61413): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015322.973:61414): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015322.973:61415): pid=470646 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015322.976:61416): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015322.976:61417): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015323.020:61418): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015323.020:61419): pid=470598 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015323.024:61420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.024:61421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.043:61422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.043:61423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.044:61424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470669 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015323.073:61425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.073:61426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.115:61427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.115:61428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.116:61429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470683 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015323.142:61430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.142:61431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.156:61432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.156:61433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.158:61434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470696 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015323.190:61435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.190:61436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.216:61437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.216:61438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.217:61439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470715 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015323.261:61440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.261:61441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.282:61442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.282:61443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.283:61444): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470728 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015323.308:61445): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015323.308:61446): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015323.329:61447): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015323.329:61448): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015323.331:61449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470742 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015323.396:61450): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015323.396:61451): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F6B6A6B6463686178656A79756F7077656E70616464797168656C71666C72203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353332332E3135303736312D36303135392D393032333330393939303731362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015323.397:61452): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015323.399:61453): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015323.725:61454): prog-id=2393 op=LOAD
type=SYSCALL msg=audit(1765015323.725:61454): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee80113d0 a2=90 a3=9500000000 items=0 ppid=470774 pid=470775 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015323.725:61454): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376234633564623036326136356561306132346436613234626132383761
type=CRYPTO_KEY_USER msg=audit(1765015323.828:61455): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467262 suid=1000 rport=54478 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015323.829:61456): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467262 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015323.833:61457): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765015323.833:61458): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015323.834:61459): pid=467231 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=USER_LOGIN msg=audit(1765015324.216:61460): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015324.216:61461): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015324.217:61462): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015324.280:61463): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015324.282:61464): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015324.283:61465): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015324.301:61466): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015324.304:61467): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015324.305:61468): pid=470810 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015324.306:61469): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015324.306:61470): pid=470757 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015324.309:61471): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015324.309:61472): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015324.310:61473): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.310:61474): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.327:61475): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.327:61476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.328:61477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470828 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015324.353:61478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.353:61479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.382:61480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.382:61481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.383:61482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470842 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015324.411:61483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.411:61484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.428:61485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.428:61486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.430:61487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470855 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015324.459:61488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.459:61489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.478:61490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.478:61491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.479:61492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470874 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015324.514:61493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.514:61494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.528:61495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.528:61496): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.529:61497): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470887 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015324.555:61498): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015324.556:61499): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015324.569:61500): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015324.569:61501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015324.571:61502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470901 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015324.630:61503): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015324.631:61504): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D736A6C6D74716B69736167637A73667A73796967787561656A6B6E6A696369203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353332342E3431393739362D36303135392D3237333831313533343636373233392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015324.631:61505): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015324.635:61506): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015324.933:61507): prog-id=2394 op=LOAD
type=SYSCALL msg=audit(1765015324.933:61507): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff58a965a0 a2=90 a3=9500000000 items=0 ppid=470933 pid=470934 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015324.933:61507): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616563386162393135666333663439376439626136386631636636653735
type=USER_LOGIN msg=audit(1765015325.467:61508): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015325.467:61509): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015325.478:61510): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015325.535:61511): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015325.535:61512): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015325.537:61513): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015325.541:61514): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015325.544:61515): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015325.545:61516): pid=470964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015325.549:61517): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015325.549:61518): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015325.599:61519): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015325.599:61520): pid=470916 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015325.603:61521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.603:61522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.620:61523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.620:61524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.622:61525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=470987 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015325.657:61526): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.657:61527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.685:61528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.686:61529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.687:61530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471001 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015325.716:61531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.716:61532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.736:61533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.736:61534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.737:61535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471014 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015325.773:61536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.773:61537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.800:61538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.800:61539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.801:61540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471033 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015325.856:61541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.856:61542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.879:61543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.879:61544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.881:61545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471046 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015325.911:61546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015325.912:61547): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015325.933:61548): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015325.933:61549): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015325.935:61550): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015325.999:61551): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015325.999:61552): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7664797966746D717468616167706D69716F746F796D6F6765687370626F7470203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353332352E3732343333312D36303135392D36323339303333343131323836382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015326.000:61553): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015326.003:61554): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015326.319:61555): prog-id=2395 op=LOAD
type=SYSCALL msg=audit(1765015326.319:61555): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc76f96110 a2=90 a3=9500000000 items=0 ppid=471092 pid=471093 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015326.319:61555): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313835303032333730396161623339633461393964653138333363353466
type=USER_LOGIN msg=audit(1765015326.738:61556): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015326.738:61557): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015326.751:61558): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015326.808:61559): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015326.809:61560): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015326.809:61561): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015326.815:61562): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015326.819:61563): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015326.820:61564): pid=471123 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015326.825:61565): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015326.825:61566): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015326.857:61567): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015326.857:61568): pid=471075 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015326.860:61569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015326.861:61570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015326.876:61571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015326.876:61572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015326.878:61573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471144 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015326.902:61574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015326.902:61575): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015326.951:61576): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015326.951:61577): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015326.952:61578): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471158 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015326.980:61579): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015326.980:61580): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015326.991:61581): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015326.991:61582): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015326.992:61583): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471171 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015327.027:61584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015327.028:61585): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015327.174:61586): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015327.174:61587): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015327.175:61588): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471190 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015327.224:61589): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015327.224:61590): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015327.239:61591): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015327.239:61592): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015327.241:61593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471203 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015327.273:61594): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015327.273:61595): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015327.290:61596): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015327.290:61597): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015327.291:61598): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471217 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015327.355:61599): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015327.355:61600): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015327.356:61601): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015327.359:61602): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015327.706:61603): prog-id=2396 op=LOAD
type=SYSCALL msg=audit(1765015327.706:61603): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca5b94270 a2=90 a3=9500000000 items=0 ppid=471249 pid=471250 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015327.706:61603): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663736393334313861316631663839653339346566386430396330336564
type=BPF msg=audit(1765015328.169:61604): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015328.269:61605): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015328.269:61606): pid=471232 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015328.274:61607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015328.274:61608): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015328.288:61609): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015328.288:61610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015328.289:61611): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471288 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015328.317:61612): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015328.317:61613): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015333.714:61614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015333.719:61615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015333.722:61616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015333.726:61617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015333.899:61618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015333.960:61619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015334.060:61620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015334.149:61621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015334.348:61622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015335.274:61623): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015335.274:61624): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015335.342:61625): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015335.342:61626): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015335.343:61627): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015335.348:61628): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.353:61629): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015335.353:61630): pid=471446 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.358:61631): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015335.358:61632): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015336.709:61633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015336.714:61634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015336.889:61635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015336.950:61636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015337.471:61637): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015337.471:61638): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015337.519:61639): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015337.519:61640): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015337.520:61641): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015337.523:61642): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015337.526:61643): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015337.527:61644): pid=471508 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015337.529:61645): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015337.529:61646): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015337.955:61647): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015337.955:61648): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015338.014:61649): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015338.014:61650): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015338.015:61651): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015338.018:61652): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015338.021:61653): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015338.022:61654): pid=471523 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015338.026:61655): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015338.026:61656): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015345.716:61657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015346.031:61658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015352.708:61659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015352.903:61660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015358.462:61661): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015358.462:61662): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015358.463:61663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471626 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015358.496:61664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015358.496:61665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015358.509:61666): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015358.509:61667): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015358.511:61668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471639 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015358.547:61669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015358.547:61670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015358.566:61671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015358.566:61672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015358.567:61673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471658 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015358.612:61674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015358.612:61675): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015358.628:61676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015358.629:61677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015358.630:61678): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471671 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015358.662:61679): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015358.662:61680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015358.678:61681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015358.678:61682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015358.680:61683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471685 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015358.759:61684): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015358.759:61685): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7865786B6470706A65637064626C766D7061646E68647A67776F776E6B6E6F73203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353335382E353034363432322D36303231372D3235363338333134383533383038312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015358.761:61686): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015358.767:61687): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015359.117:61688): prog-id=2397 op=LOAD
type=SYSCALL msg=audit(1765015359.117:61688): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe605250c0 a2=90 a3=9500000000 items=0 ppid=471717 pid=471718 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015359.117:61688): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626439386162626166333733326337343738376666363465303364653130
type=BPF msg=audit(1765015359.576:61689): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015359.685:61690): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015359.685:61691): pid=471700 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015359.691:61692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015359.691:61693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015359.704:61694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015359.704:61695): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015359.707:61696): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015359.742:61697): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015359.742:61698): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015360.025:61699): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015360.025:61700): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015360.027:61701): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015360.061:61702): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015360.062:61703): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015360.079:61704): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015360.079:61705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015360.080:61706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471783 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015360.120:61707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015360.120:61708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015360.139:61709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015360.139:61710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015360.140:61711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471802 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015360.191:61712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015360.191:61713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015360.214:61714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015360.214:61715): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015360.217:61716): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471815 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015360.251:61717): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015360.251:61718): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015360.271:61719): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015360.271:61720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015360.273:61721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471829 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015360.350:61722): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015360.351:61723): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6162716B6F68717866737576616967686E7964756378686B7361747775666871203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353336302E303730313336352D36303233342D3236393430333931313038323736362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015360.352:61724): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015360.356:61725): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015360.733:61726): prog-id=2398 op=LOAD
type=SYSCALL msg=audit(1765015360.733:61726): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd3f0e43c0 a2=90 a3=9500000000 items=0 ppid=471862 pid=471863 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015360.733:61726): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383064353939336362396663646338336235363063386361663834623332
type=BPF msg=audit(1765015361.234:61727): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015361.365:61728): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015361.366:61729): pid=471844 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015361.370:61730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.371:61731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.392:61732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.392:61733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.394:61734): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471900 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015361.428:61735): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.428:61736): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.571:61737): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.572:61738): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.574:61739): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471914 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015361.606:61740): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.606:61741): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.619:61742): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.619:61743): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.621:61744): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471927 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015361.658:61745): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.658:61746): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.679:61747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.679:61748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.680:61749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471946 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015361.725:61750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.725:61751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.740:61752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.740:61753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.742:61754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471959 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015361.774:61755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015361.774:61756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015361.790:61757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015361.791:61758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015361.793:61759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=471973 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015361.861:61760): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015361.862:61761): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77656D6774796D75756C746A7A6A6B6C776E68627063776B6B647178696B6A77203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353336312E363135303136352D36303234372D3132343130353630383730353031332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015361.863:61762): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015361.874:61763): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015362.212:61764): prog-id=2399 op=LOAD
type=SYSCALL msg=audit(1765015362.212:61764): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe74f84cd0 a2=90 a3=9500000000 items=0 ppid=472005 pid=472006 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015362.212:61764): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333161663936336263663961643966313532316638316133646364646137
type=USER_LOGIN msg=audit(1765015362.624:61765): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015362.624:61766): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015362.665:61767): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015362.681:61768): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015362.681:61769): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015362.682:61770): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015362.685:61771): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015362.688:61772): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015362.688:61773): pid=472030 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015362.692:61774): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015362.692:61775): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015362.695:61776): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015362.695:61777): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015362.759:61778): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015362.759:61779): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015362.760:61780): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015362.764:61781): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015362.791:61782): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015362.791:61783): pid=471988 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015362.796:61784): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015362.796:61785): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015362.815:61786): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015362.815:61787): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015362.817:61788): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472074 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015362.850:61789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015362.851:61790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015362.877:61791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015362.877:61792): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015362.879:61793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472088 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015362.912:61794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015362.912:61795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015362.927:61796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015362.927:61797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015362.929:61798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472101 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015362.969:61799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015362.969:61800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015362.984:61801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015362.985:61802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015362.986:61803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472120 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015363.032:61804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015363.032:61805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015363.048:61806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015363.048:61807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015363.050:61808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472145 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015363.091:61809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015363.091:61810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015363.107:61811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015363.107:61812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015363.110:61813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472166 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015363.178:61814): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015363.178:61815): pid=472056 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_ACCT msg=audit(1765015363.178:61816): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015363.179:61817): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67696C696A6370646C7669637372707865746D7769616963687575697564697A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353336322E3931393139312D36303234372D34333136313830383335303035362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015363.180:61818): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015363.183:61819): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015363.183:61820): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015363.183:61821): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015363.223:61822): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015363.223:61823): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015363.294:61824): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015363.294:61825): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015363.295:61826): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015363.298:61827): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015363.301:61828): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015363.301:61829): pid=472187 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015363.307:61830): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015363.307:61831): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015363.307:61832): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015363.308:61833): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015363.371:61834): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015363.371:61835): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015363.372:61836): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015363.376:61837): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015363.526:61838): prog-id=2400 op=LOAD
type=SYSCALL msg=audit(1765015363.526:61838): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeb0de2880 a2=90 a3=9500000000 items=0 ppid=472233 pid=472234 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015363.526:61838): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316466656539343236663436633661643661363238363539353938353065
type=BPF msg=audit(1765015363.962:61839): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015364.020:61840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015364.056:61841): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015364.056:61842): pid=472184 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015364.060:61843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.060:61844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.076:61845): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.076:61846): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.078:61847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472323 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015364.112:61848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.112:61849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.137:61850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.137:61851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.139:61852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472340 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015364.165:61853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015364.167:61854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015364.171:61855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.171:61856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.186:61857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.186:61858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.188:61859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472378 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015364.229:61860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.229:61861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.248:61862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.248:61863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.250:61864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472421 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015364.298:61865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.299:61866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.313:61867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.313:61868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.315:61869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472455 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015364.324:61870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015364.348:61871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015364.348:61872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015364.367:61873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015364.367:61874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015364.369:61875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472481 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015364.393:61876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015364.421:61877): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015364.421:61878): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D73766C777A626C786A64676E7666636E697673657371716163677170766A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353336342E3137383138382D36303234372D3232393430313436383439323130362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015364.422:61879): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015364.426:61880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015364.427:61881): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015364.657:61882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015364.734:61883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015364.747:61884): prog-id=2401 op=LOAD
type=SYSCALL msg=audit(1765015364.747:61884): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda1fd7ed0 a2=90 a3=9500000000 items=0 ppid=472586 pid=472587 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015364.747:61884): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326631376438613266313738336332646330366363373462656636316439
type=BPF msg=audit(1765015365.121:61885): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015365.136:61886): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015365.136:61887): pid=472202 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015365.142:61888): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015365.142:61889): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015365.224:61890): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015365.224:61891): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015365.242:61892): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015365.243:61893): pid=472505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015365.247:61894): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.247:61895): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015365.261:61896): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.262:61897): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.263:61898): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472697 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015365.287:61899): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015365.288:61900): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015365.288:61901): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015365.293:61902): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015365.295:61903): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.295:61904): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765015365.297:61905): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015365.297:61906): pid=472684 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015365.302:61907): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015365.302:61908): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015365.305:61909): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015365.305:61910): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015365.366:61911): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015365.366:61912): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520726D2D6461656D6F6E202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538202D2D6E616D65206D64732E6D64732E6E70303030353534383738352E736F7A737666202D2D666F726365 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015365.367:61913): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015365.370:61914): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015365.469:61915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.469:61916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.470:61917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472728 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015365.505:61918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.505:61919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015365.521:61920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.521:61921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.523:61922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472741 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015365.560:61923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.560:61924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015365.581:61925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.581:61926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.582:61927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472760 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015365.626:61928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.626:61929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015365.642:61930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.643:61931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.644:61932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472780 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015365.676:61933): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015365.676:61934): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015365.744:61935): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015365.745:61936): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015365.748:61937): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472801 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015365.821:61938): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015365.821:61939): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776D746C72616D776F69636A746E676B616E627677717776627A636F686C62203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353336352E353132343234322D36303237342D3235393435363731373036363337352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015365.822:61940): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015365.827:61941): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015366.182:61942): prog-id=2402 op=LOAD
type=SYSCALL msg=audit(1765015366.182:61942): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe57efa5d0 a2=90 a3=9500000000 items=0 ppid=472876 pid=472877 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015366.182:61942): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653761623965306533363133666538626637613264303362383932333039
type=BPF msg=audit(1765015366.693:61943): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015366.806:61944): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015366.807:61945): pid=472827 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015366.813:61946): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015366.813:61947): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015366.828:61948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015366.828:61949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015366.831:61950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=472943 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015366.867:61951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015366.868:61952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015366.965:61953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015366.969:61954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015367.166:61955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015367.240:61956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015370.607:61957): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015371.120:61958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mds.mds.np0005548785.sozsvf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015371.501:61959): prog-id=2403 op=LOAD
type=BPF msg=audit(1765015371.501:61960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.501:61961): prog-id=2404 op=LOAD
type=BPF msg=audit(1765015371.501:61962): prog-id=2405 op=LOAD
type=BPF msg=audit(1765015371.501:61963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.501:61964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.502:61965): prog-id=2406 op=LOAD
type=BPF msg=audit(1765015371.502:61966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.507:61967): prog-id=2407 op=LOAD
type=BPF msg=audit(1765015371.507:61968): prog-id=2408 op=LOAD
type=BPF msg=audit(1765015371.507:61969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.507:61970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.514:61971): prog-id=2409 op=LOAD
type=BPF msg=audit(1765015371.514:61972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.517:61973): prog-id=2410 op=LOAD
type=BPF msg=audit(1765015371.517:61974): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.517:61975): prog-id=2411 op=LOAD
type=BPF msg=audit(1765015371.517:61976): prog-id=2412 op=LOAD
type=BPF msg=audit(1765015371.517:61977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015371.517:61978): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015371.574:61979): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015371.574:61980): pid=472713 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015371.580:61981): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015371.580:61982): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015376.711:61983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015377.034:61984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015383.708:61985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015383.884:61986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015387.826:61987): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015387.826:61988): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015387.893:61989): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015387.893:61990): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015387.895:61991): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015387.902:61992): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015387.906:61993): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015387.906:61994): pid=473144 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015387.912:61995): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015387.912:61996): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015388.383:61997): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015388.383:61998): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015388.442:61999): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015388.443:62000): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015388.444:62001): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015388.447:62002): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.450:62003): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015388.450:62004): pid=473159 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.482:62005): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015388.482:62006): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015388.503:62007): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015388.503:62008): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015388.563:62009): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015388.564:62010): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015388.565:62011): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015388.567:62012): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015390.103:62013): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015390.103:62014): pid=473174 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015390.110:62015): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015390.110:62016): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015390.153:62017): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015390.153:62018): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015390.221:62019): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015390.221:62020): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015390.222:62021): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015390.226:62022): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015390.229:62023): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015390.229:62024): pid=473329 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015390.233:62025): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015390.233:62026): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015390.237:62027): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015390.237:62028): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015390.299:62029): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015390.300:62030): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015390.300:62031): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015390.303:62032): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015390.970:62033): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015390.970:62034): pid=473344 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.060:62035): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015391.060:62036): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015391.099:62037): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015391.100:62038): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015391.162:62039): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015391.163:62040): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015391.164:62041): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015391.168:62042): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.171:62043): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015391.172:62044): pid=473390 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.176:62045): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015391.176:62046): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015391.629:62047): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015391.629:62048): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015391.693:62049): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015391.693:62050): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015391.694:62051): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015391.697:62052): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.700:62053): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015391.700:62054): pid=473405 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.704:62055): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015391.704:62056): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015394.736:62057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015394.741:62058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015394.746:62059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015394.755:62060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015395.066:62061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015395.090:62062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015395.136:62063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015395.270:62064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015397.642:62065): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015397.642:62066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015397.644:62067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473541 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015397.679:62068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015397.679:62069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015397.693:62070): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015397.693:62071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015397.695:62072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473554 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015397.723:62073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015397.726:62074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015397.733:62075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015397.733:62076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015397.876:62077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015397.891:62078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015397.891:62079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015397.893:62080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473611 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015397.943:62081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015397.944:62082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015397.962:62083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015397.962:62084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015397.963:62085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473628 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015397.996:62086): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015397.996:62087): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.013:62088): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.013:62089): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.016:62090): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473647 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015398.051:62091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015398.069:62092): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015398.070:62093): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736677746D63696C7562706E6665686F6E7672776F727A727378637161716977203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353339372E363837303437352D36303331372D3137393934383636323738373235322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015398.071:62094): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015398.082:62095): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015398.281:62096): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015398.282:62097): pid=473662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015398.287:62098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.287:62099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.299:62100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.299:62101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.301:62102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473667 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015398.332:62103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.332:62104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.400:62105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.400:62106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.402:62107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473681 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015398.435:62108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.435:62109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.448:62110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.448:62111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.449:62112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473694 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015398.484:62113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.485:62114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.505:62115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.506:62116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.507:62117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473713 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015398.546:62118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.546:62119): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.561:62120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.561:62121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.602:62122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473726 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015398.629:62123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015398.629:62124): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015398.644:62125): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015398.644:62126): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015398.645:62127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473740 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015398.703:62128): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015398.703:62129): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6779716B6E727564776E6769776669776C746A666F6B63657770667976666B70203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353339382E343432363738372D36303332362D33333630333434373532343233342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015398.704:62130): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015398.707:62131): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ANOM_PROMISCUOUS msg=audit(1765015399.762:62132): dev=vlan21 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="unknown(985)"
type=SYSCALL msg=audit(1765015399.762:62132): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7ffc8c957940 a2=0 a3=0 items=0 ppid=1 pid=22426 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="unknown(985)" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="unknown(985)" SGID="unknown(985)" FSGID="unknown(985)"
type=PROCTITLE msg=audit(1765015399.762:62132): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765015399.892:62133): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="unknown(985)"
type=SYSCALL msg=audit(1765015399.892:62133): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7ffc8c957730 a2=0 a3=0 items=0 ppid=1 pid=22426 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="unknown(985)" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="unknown(985)" SGID="unknown(985)" FSGID="unknown(985)"
type=PROCTITLE msg=audit(1765015399.892:62133): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1765015406.230:62134): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015406.230:62135): pid=473755 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015406.236:62136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.236:62137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.250:62138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.250:62139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.251:62140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473925 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.282:62141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.282:62142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.394:62143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.394:62144): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.396:62145): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473939 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.430:62146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.431:62147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.445:62148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.445:62149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.446:62150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473952 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.483:62151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.483:62152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.631:62153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.632:62154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.633:62155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473971 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.680:62156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.680:62157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.694:62158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.694:62159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.695:62160): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473984 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.727:62161): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.727:62162): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.740:62163): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.741:62164): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.742:62165): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=473998 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015406.957:62166): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015406.958:62167): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015406.971:62168): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015406.971:62169): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015406.972:62170): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474014 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.006:62171): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.006:62172): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.077:62173): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.077:62174): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.078:62175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474028 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.109:62176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.109:62177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.130:62178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.130:62179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.131:62180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474041 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.166:62181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.166:62182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.184:62183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.185:62184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.186:62185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.231:62186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.231:62187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.243:62188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.243:62189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.245:62190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474073 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.275:62191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.276:62192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.288:62193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.288:62194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.289:62195): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474087 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015407.537:62196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015407.562:62197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.562:62198): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.575:62199): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.575:62200): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.577:62201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474111 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.612:62202): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.612:62203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.688:62204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.688:62205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.690:62206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474140 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.723:62207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.723:62208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.736:62209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.736:62210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.737:62211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474153 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015407.776:62212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.776:62213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015407.938:62214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015407.939:62215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015407.941:62216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474178 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015407.961:62217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015407.986:62218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015407.986:62219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.000:62220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.000:62221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.001:62222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474191 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.033:62223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.033:62224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.046:62225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.046:62226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.048:62227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474205 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015408.113:62228): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015408.114:62229): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B697371697476796B72646770667275616E6E727A77636D7A7571697A6C73203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353430372E373330323238342D36303335352D3136373735313438383236353235322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015408.114:62230): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015408.119:62231): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015408.265:62232): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015408.265:62233): pid=474220 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015408.270:62234): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.270:62235): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.283:62236): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.283:62237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.284:62238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474223 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.314:62239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.315:62240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.354:62241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.354:62242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.356:62243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474237 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.386:62244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.386:62245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.397:62246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.397:62247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.399:62248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474250 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.434:62249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.434:62250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.449:62251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.450:62252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.451:62253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474269 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.495:62254): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.496:62255): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.510:62256): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.510:62257): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.512:62258): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474282 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.546:62259): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.547:62260): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.560:62261): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.560:62262): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.562:62263): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474296 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015408.631:62264): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015408.632:62265): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B71656972736D69706763736B727469667762686970646C6D76706964667379203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353430382E333933363533322D36303335352D35363037353938323334313933372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015408.632:62266): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015408.635:62267): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015408.855:62268): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015408.855:62269): pid=474311 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015408.859:62270): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.859:62271): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.873:62272): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.873:62273): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.875:62274): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474314 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.908:62275): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.908:62276): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.952:62277): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.952:62278): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.953:62279): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474328 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015408.985:62280): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015408.985:62281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015408.997:62282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015408.997:62283): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015408.998:62284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474341 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.038:62285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.038:62286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.060:62287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.060:62288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.062:62289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474360 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.106:62290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.106:62291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.123:62292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.123:62293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.126:62294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474373 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.157:62295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.157:62296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.171:62297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.171:62298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.174:62299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474387 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015409.239:62300): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015409.239:62301): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796A7975737A76687A6E6C73746A636E766F636C796C7173796A796F6D6169203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353430382E393931393934342D36303335352D33363933353836343734323834392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015409.241:62302): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015409.243:62303): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015409.409:62304): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015409.410:62305): pid=474402 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015409.414:62306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.414:62307): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.428:62308): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.428:62309): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.430:62310): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474405 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.462:62311): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.462:62312): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.512:62313): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.513:62314): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.515:62315): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474419 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.544:62316): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.545:62317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.565:62318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.565:62319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.566:62320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474432 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.603:62321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.604:62322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.622:62323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.622:62324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.623:62325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474451 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.668:62326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.668:62327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.682:62328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.682:62329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.684:62330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474464 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015409.715:62331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015409.716:62332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015409.737:62333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015409.737:62334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015409.739:62335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474478 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015409.803:62336): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015409.804:62337): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A62736C7273746A6177747268796B7571726F707664736B6D626676726C63203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353430392E353533313636392D36303335352D3133363034393531383534313931312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015409.805:62338): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015409.832:62339): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015410.071:62340): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015410.071:62341): pid=474493 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015410.074:62342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.075:62343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.089:62344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.090:62345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.091:62346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474496 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015410.119:62347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.119:62348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.191:62349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.191:62350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.192:62351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474510 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015410.222:62352): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.222:62353): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.235:62354): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.235:62355): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.236:62356): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474523 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015410.271:62357): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.271:62358): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.736:62359): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.736:62360): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.738:62361): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474542 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015410.782:62362): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.782:62363): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.794:62364): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.794:62365): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.796:62366): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474555 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015410.837:62367): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015410.837:62368): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015410.850:62369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015410.850:62370): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015410.852:62371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474569 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015410.918:62372): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015410.919:62373): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262716E69746279706B6F74656F707470627069706F66666A61617466637074203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431302E323330343934352D36303338352D3230373833353134303432353837312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015410.919:62374): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015410.922:62375): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015411.088:62376): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015411.088:62377): pid=474584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015411.092:62378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.092:62379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.107:62380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.107:62381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.109:62382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474589 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015411.143:62383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.143:62384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.158:62385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.158:62386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.159:62387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474602 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015411.188:62388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.188:62389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.207:62390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.207:62391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.209:62392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474616 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015411.299:62393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.299:62394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.314:62395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.314:62396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.315:62397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474629 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015411.350:62398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.350:62399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.363:62400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.363:62401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.365:62402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474643 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015411.413:62403): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015411.414:62404): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7263787A63766C736B78686277777276706563727A6863716C656878676E7577203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431302E323330343934352D36303338352D3230373833353134303432353837312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015411.414:62405): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015411.417:62406): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015411.646:62407): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015411.647:62408): pid=474658 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015411.650:62409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.651:62410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.665:62411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.665:62412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015411.666:62413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474661 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015411.700:62414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015411.700:62415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015411.999:62416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015411.999:62417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015412.002:62418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474675 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015412.033:62419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015412.034:62420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015412.054:62421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015412.054:62422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015412.056:62423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474688 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015412.095:62424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015412.095:62425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015412.115:62426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015412.116:62427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015412.118:62428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474707 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015412.165:62429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015412.165:62430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015412.189:62431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015412.189:62432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015412.191:62433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474720 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015412.227:62434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015412.227:62435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015412.245:62436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015412.245:62437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015412.247:62438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474734 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015412.319:62439): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015412.320:62440): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786363626E6E7662716C6461726E636862656461726C7A786B6876697A776670203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431322E303431363836332D36303431332D3135323430393738303530373530342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015412.321:62441): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015412.325:62442): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015412.614:62443): prog-id=2413 op=LOAD
type=SYSCALL msg=audit(1765015412.614:62443): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcaec404e0 a2=90 a3=9500000000 items=0 ppid=474766 pid=474767 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015412.614:62443): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333633306330336664313131613830653764346235306633366537353262
type=BPF msg=audit(1765015413.122:62444): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015413.252:62445): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015413.253:62446): pid=474749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015413.258:62447): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.259:62448): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.279:62449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.280:62450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.282:62451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474803 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015413.315:62452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.315:62453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.341:62454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.342:62455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.343:62456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474817 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015413.370:62457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.370:62458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.383:62459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.383:62460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.384:62461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474830 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015413.418:62462): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.419:62463): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.442:62464): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.442:62465): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.443:62466): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474849 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015413.488:62467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.488:62468): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.504:62469): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.505:62470): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.506:62471): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474862 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015413.541:62472): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015413.541:62473): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.559:62474): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015413.560:62475): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015413.562:62476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=474876 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015413.638:62477): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015413.638:62478): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71776164707164706B756A66617667787470686961786A6A68636A696D726266203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431332E333738373238322D36303431332D3132313036363336303831323932342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015413.639:62479): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015413.645:62480): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015413.786:62481): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015413.786:62482): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015413.873:62483): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015413.873:62484): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015413.874:62485): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015413.879:62486): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.884:62487): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015413.885:62488): pid=474895 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.890:62489): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015413.890:62490): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015413.937:62491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015413.959:62492): prog-id=2414 op=LOAD
type=SYSCALL msg=audit(1765015413.959:62492): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6d3572f0 a2=90 a3=9500000000 items=0 ppid=474924 pid=474925 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015413.959:62492): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363564323662613863333630376437656136313233663439313736633836
type=SERVICE_STOP msg=audit(1765015414.175:62493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015414.450:62494): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015414.450:62495): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015414.457:62496): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015414.508:62497): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015414.508:62498): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015414.509:62499): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015414.514:62500): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.518:62501): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015414.518:62502): pid=474980 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.521:62503): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015414.521:62504): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015414.573:62505): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015414.574:62506): pid=474891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015414.578:62507): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.579:62508): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.592:62509): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.592:62510): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.595:62511): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475001 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015414.631:62512): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.631:62513): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.659:62514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.659:62515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.660:62516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475015 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015414.692:62517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.692:62518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.707:62519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.707:62520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.709:62521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475028 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015414.742:62522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.742:62523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.768:62524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.768:62525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.769:62526): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475047 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015414.823:62527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.824:62528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.840:62529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.841:62530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.842:62531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015414.875:62532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015414.875:62533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015414.889:62534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015414.890:62535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015414.891:62536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475074 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015414.960:62537): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015414.961:62538): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75697776646A616E796A666B75776A7A7667696E6F7474686F726761756D6768203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431342E373031313031332D36303431332D3231323234373432383236373432392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015414.962:62539): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015414.965:62540): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015415.417:62541): prog-id=2415 op=LOAD
type=SYSCALL msg=audit(1765015415.417:62541): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe796a8240 a2=90 a3=9500000000 items=0 ppid=475140 pid=475141 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015415.417:62541): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323739633565626238646664306137633861313134316537343966356265
type=USER_LOGIN msg=audit(1765015415.834:62542): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015415.834:62543): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015415.846:62544): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015415.885:62545): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015415.885:62546): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015415.886:62547): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015415.896:62548): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015415.899:62549): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015415.900:62550): pid=475166 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015415.906:62551): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015415.906:62552): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015415.981:62553): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015415.981:62554): pid=475089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015415.987:62555): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015415.987:62556): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.006:62557): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.006:62558): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.008:62559): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475195 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015416.042:62560): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015416.042:62561): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.144:62562): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.145:62563): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.146:62564): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475209 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015416.179:62565): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015416.179:62566): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.201:62567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.201:62568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.203:62569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475222 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015416.244:62570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015416.244:62571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.263:62572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.263:62573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.265:62574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475241 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015416.330:62575): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015416.330:62576): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.343:62577): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.343:62578): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.345:62579): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475254 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015416.377:62580): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015416.377:62581): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015416.393:62582): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015416.393:62583): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015416.395:62584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475268 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015416.463:62585): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015416.464:62586): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015416.465:62587): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015416.469:62588): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015416.832:62589): prog-id=2416 op=LOAD
type=SYSCALL msg=audit(1765015416.832:62589): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe8498e600 a2=90 a3=9500000000 items=0 ppid=475301 pid=475302 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015416.832:62589): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663838316337356234343935626332363963633039346264666335626538
type=BPF msg=audit(1765015417.300:62590): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015417.417:62591): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015417.417:62592): pid=475283 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015417.422:62593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.422:62594): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.437:62595): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.437:62596): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.439:62597): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475341 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015417.503:62598): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.503:62599): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.661:62600): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.661:62601): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.662:62602): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475355 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015417.693:62603): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.693:62604): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.711:62605): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.711:62606): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.713:62607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475368 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015417.752:62608): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.752:62609): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.777:62610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.777:62611): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.779:62612): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475387 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015417.831:62613): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.831:62614): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.849:62615): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.849:62616): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.850:62617): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475400 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015417.881:62618): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015417.881:62619): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015417.901:62620): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015417.901:62621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015417.903:62622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475414 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015417.970:62623): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015417.970:62624): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6662626A61776D696173716A7273666A696269656F74736C6663766C726E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431372E373032333033322D36303435332D3235383235393435333634353934362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015417.971:62625): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015417.975:62626): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015418.292:62627): prog-id=2417 op=LOAD
type=SYSCALL msg=audit(1765015418.292:62627): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe06a364c0 a2=90 a3=9500000000 items=0 ppid=475446 pid=475447 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015418.292:62627): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626539356337373632386131303136633234633937383536666632343765
type=BPF msg=audit(1765015418.690:62628): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015418.820:62629): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015418.820:62630): pid=475429 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015418.859:62631): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015418.859:62632): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015418.859:62633): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015418.859:62634): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015418.861:62635): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475486 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015418.897:62636): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015418.897:62637): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015419.092:62638): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015419.092:62639): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015419.093:62640): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475500 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015419.123:62641): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015419.123:62642): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015419.134:62643): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015419.134:62644): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015419.135:62645): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475513 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015419.166:62646): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015419.166:62647): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015419.186:62648): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015419.186:62649): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015419.187:62650): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475532 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015419.227:62651): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015419.228:62652): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015419.241:62653): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015419.241:62654): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015419.243:62655): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475545 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015419.281:62656): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015419.281:62657): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015419.296:62658): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015419.296:62659): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015419.298:62660): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475559 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015419.358:62661): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015419.359:62662): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64657461756F6270666979617463727471746B7873627367616275656E7A746A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353431392E313238323334312D36303436382D32313330363938303731383133362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015419.361:62663): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015419.366:62664): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015419.660:62665): prog-id=2418 op=LOAD
type=SYSCALL msg=audit(1765015419.660:62665): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdec4e5e30 a2=90 a3=9500000000 items=0 ppid=475591 pid=475592 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015419.660:62665): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323737323663353066656538316663626131353562643630346138653764
type=BPF msg=audit(1765015420.121:62666): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015420.243:62667): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015420.244:62668): pid=475574 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015420.250:62669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.250:62670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.263:62671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.263:62672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.265:62673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475631 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015420.289:62674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.289:62675): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.334:62676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.334:62677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.335:62678): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475645 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015420.367:62679): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.367:62680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.383:62681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.383:62682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.385:62683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475658 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015420.421:62684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.421:62685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.437:62686): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.437:62687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.439:62688): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475677 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015420.482:62689): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.482:62690): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.496:62691): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.496:62692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.497:62693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475690 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015420.532:62694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015420.532:62695): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015420.545:62696): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015420.545:62697): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015420.547:62698): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475704 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015420.613:62699): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015420.613:62700): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A777A6F69636D6C6C6C6762656877776F75777A716C77766C6E756866646D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432302E333735353031342D36303436382D3132323130393236373533363431392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015420.614:62701): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015420.619:62702): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015420.999:62703): prog-id=2419 op=LOAD
type=SYSCALL msg=audit(1765015420.999:62703): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc99531560 a2=90 a3=9500000000 items=0 ppid=475736 pid=475737 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015420.999:62703): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376435393835646336383634663265323766396161353130373065653136
type=BPF msg=audit(1765015421.468:62704): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015421.583:62705): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015421.584:62706): pid=475719 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015421.589:62707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.589:62708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.606:62709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.606:62710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.609:62711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475776 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015421.645:62712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.645:62713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.689:62714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.689:62715): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.691:62716): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475790 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015421.724:62717): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.724:62718): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.747:62719): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.747:62720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.749:62721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475803 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015421.785:62722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.785:62723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.808:62724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.808:62725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.809:62726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475822 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015421.857:62727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.857:62728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.873:62729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.874:62730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.875:62731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475835 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015421.912:62732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015421.912:62733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015421.929:62734): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015421.929:62735): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015421.932:62736): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475849 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015421.999:62737): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015421.999:62738): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716365667266667A6B63686C616F6D6D786E646D756F6D786B7A797A73736771203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432312E373333303439362D36303436382D3133393530303432333032383238382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015422.000:62739): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015422.004:62740): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015422.342:62741): prog-id=2420 op=LOAD
type=SYSCALL msg=audit(1765015422.342:62741): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe10728fe0 a2=90 a3=9500000000 items=0 ppid=475881 pid=475882 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015422.342:62741): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623564383561373638636365653966643063633464303862623132316461
type=BPF msg=audit(1765015422.860:62742): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015422.995:62743): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015422.995:62744): pid=475864 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015422.999:62745): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.000:62746): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.020:62747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.020:62748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.022:62749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475920 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015423.047:62750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.048:62751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.074:62752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.074:62753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.075:62754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475934 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015423.100:62755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.100:62756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.112:62757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.112:62758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.113:62759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475947 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015423.152:62760): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.152:62761): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.180:62762): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.181:62763): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.182:62764): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475966 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015423.239:62765): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.239:62766): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.265:62767): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.265:62768): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.267:62769): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475979 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015423.302:62770): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015423.303:62771): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015423.321:62772): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015423.322:62773): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015423.323:62774): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=475993 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015423.394:62775): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015423.394:62776): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676870757470706B706B716C71727475776A63637A787A69646E696D7A6267203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432332E313038333833372D36303436382D31393036373531333531363238392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015423.395:62777): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015423.400:62778): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015423.733:62779): prog-id=2421 op=LOAD
type=SYSCALL msg=audit(1765015423.733:62779): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9788e700 a2=90 a3=9500000000 items=0 ppid=476024 pid=476025 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015423.733:62779): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366665636432333831353634396662643538613431336134386164383134
type=USER_LOGIN msg=audit(1765015424.247:62780): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015424.248:62781): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015424.255:62782): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015424.319:62783): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015424.319:62784): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015424.320:62785): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015424.326:62786): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.330:62787): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015424.330:62788): pid=476058 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.334:62789): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015424.335:62790): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015424.394:62791): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015424.394:62792): pid=476008 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015424.400:62793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.400:62794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.422:62795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.422:62796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.424:62797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476082 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015424.456:62798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.457:62799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.486:62800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.486:62801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.487:62802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476096 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015424.520:62803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.520:62804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.534:62805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.534:62806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.535:62807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476109 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015424.569:62808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.569:62809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.589:62810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.589:62811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.591:62812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476128 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015424.640:62813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.640:62814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.655:62815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.655:62816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.657:62817): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476141 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015424.693:62818): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015424.693:62819): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015424.713:62820): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015424.713:62821): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015424.715:62822): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476155 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015424.779:62823): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015424.780:62824): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7669656B6365686B79777866777A626D69647367636476686161616170686B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432342E3532393233312D36303436382D3231313334393438393539323833382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015424.781:62825): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015424.784:62826): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015425.075:62827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015425.087:62828): prog-id=2422 op=LOAD
type=SYSCALL msg=audit(1765015425.087:62828): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6c04e710 a2=90 a3=9500000000 items=0 ppid=476188 pid=476190 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015425.087:62828): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373861653062333132646330633738323530313863663137303165653961
type=SERVICE_START msg=audit(1765015425.131:62829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015425.330:62830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015425.333:62831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015425.360:62832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015425.409:62833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015425.631:62834): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015425.683:62835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015425.790:62836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015425.800:62837): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015425.800:62838): pid=476170 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015425.805:62839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015425.806:62840): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015425.820:62841): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015425.820:62842): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015425.822:62843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476338 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015425.860:62844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015425.860:62845): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015425.893:62846): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015425.893:62847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015425.895:62848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476352 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015425.928:62849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015425.928:62850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015425.943:62851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015425.943:62852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015425.945:62853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476365 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015425.985:62854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015425.985:62855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015426.007:62856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015426.007:62857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015426.009:62858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476384 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015426.073:62859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015426.073:62860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015426.086:62861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015426.086:62862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015426.088:62863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476397 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015426.122:62864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015426.122:62865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015426.139:62866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015426.139:62867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015426.142:62868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476411 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015426.215:62869): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015426.216:62870): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A61736463756F7A6B6F786E707270746A66656464796363786B787579616F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432352E393336343832372D36303436382D3231303539383830323735363135382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015426.217:62871): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015426.223:62872): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015426.552:62873): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015426.552:62874): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015426.588:62875): prog-id=2423 op=LOAD
type=SYSCALL msg=audit(1765015426.588:62875): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbe94eef0 a2=90 a3=9500000000 items=0 ppid=476451 pid=476452 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015426.588:62875): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306235653064326661393463396665353730346561343466653030323932
type=USER_ACCT msg=audit(1765015426.627:62876): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015426.627:62877): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015426.629:62878): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015426.632:62879): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015426.636:62880): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015426.636:62881): pid=476443 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015426.641:62882): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015426.641:62883): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015427.031:62884): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015427.068:62885): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015427.068:62886): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015427.137:62887): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015427.137:62888): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015427.138:62889): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015427.141:62890): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.144:62891): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015427.145:62892): pid=476494 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.148:62893): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015427.148:62894): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015427.154:62895): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015427.154:62896): pid=476426 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015427.158:62897): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.158:62898): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.171:62899): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.171:62900): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.172:62901): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476511 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015427.199:62902): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.200:62903): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.229:62904): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.229:62905): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.231:62906): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476525 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015427.258:62907): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.258:62908): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.273:62909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.273:62910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.275:62911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476538 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015427.313:62912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.313:62913): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.330:62914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.330:62915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.331:62916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476557 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015427.379:62917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.379:62918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.393:62919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.393:62920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.394:62921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476570 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015427.431:62922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015427.431:62923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015427.444:62924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015427.444:62925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015427.446:62926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476584 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015427.514:62927): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015427.515:62928): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696D7961686D6E766F686F796F7762626562786C636C637866636A75797472203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432372E323635393235362D36303436382D32373133323832333033343331332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015427.516:62929): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015427.519:62930): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015427.849:62931): prog-id=2424 op=LOAD
type=SYSCALL msg=audit(1765015427.849:62931): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe62803350 a2=90 a3=9500000000 items=0 ppid=476616 pid=476617 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015427.849:62931): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653634663730613164366531323035633437373032323234343337343662
type=SERVICE_START msg=audit(1765015427.890:62932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015428.041:62933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015428.340:62934): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015428.340:62935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015428.349:62936): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015428.349:62937): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015428.421:62938): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015428.421:62939): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015428.423:62940): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015428.428:62941): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015428.432:62942): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015428.432:62943): pid=476668 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015428.437:62944): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015428.437:62945): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015428.536:62946): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015428.537:62947): pid=476599 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015428.541:62948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.541:62949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.557:62950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.557:62951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.559:62952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476715 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015428.592:62953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.592:62954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.615:62955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.615:62956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.621:62957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476735 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015428.623:62958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015428.654:62959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.654:62960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.666:62961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.666:62962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.668:62963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476748 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015428.708:62964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.708:62965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.727:62966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.728:62967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.729:62968): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476767 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015428.781:62969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.781:62970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.798:62971): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.798:62972): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.800:62973): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476780 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015428.834:62974): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015428.834:62975): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015428.849:62976): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015428.849:62977): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.851:62978): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476794 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015428.881:62979): pid=476806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015428.882:62980): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=476806 suid=74 rport=31566 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015428.883:62981): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=476806 suid=74 rport=31566 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1765015428.923:62982): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015428.923:62983): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676C6F646F7A79747A6E6273647A79677861786D646775797A6274766F6778203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432382E363631333834382D36303436382D3139333732313535343633323730342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015428.924:62984): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015428.929:62985): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015429.234:62986): prog-id=2425 op=LOAD
type=SYSCALL msg=audit(1765015429.234:62986): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc75667fe0 a2=90 a3=9500000000 items=0 ppid=476827 pid=476828 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015429.234:62986): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656631303731306164666265393862643865353838353431363165393739
type=BPF msg=audit(1765015429.679:62987): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015429.806:62988): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015429.807:62989): pid=476810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015429.812:62990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015429.812:62991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015429.833:62992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015429.833:62993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015429.836:62994): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476867 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015429.869:62995): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015429.869:62996): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015429.895:62997): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015429.896:62998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015429.897:62999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476881 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015429.928:63000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015429.928:63001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015429.943:63002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015429.943:63003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015429.945:63004): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476894 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015429.982:63005): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015429.982:63006): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015430.002:63007): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015430.003:63008): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015430.004:63009): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476913 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015430.051:63010): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015430.051:63011): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015430.066:63012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015430.066:63013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015430.067:63014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476926 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015430.101:63015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015430.101:63016): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015430.117:63017): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015430.117:63018): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015430.118:63019): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476940 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015430.196:63020): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015430.196:63021): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7767786E677876786666706C64776465646E787A6C6867797561716977767A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353432392E393335343037342D36303436382D373635343839323230313538352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015430.197:63022): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015430.201:63023): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015430.495:63024): prog-id=2426 op=LOAD
type=SYSCALL msg=audit(1765015430.495:63024): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe667ec5f0 a2=90 a3=9500000000 items=0 ppid=476972 pid=476973 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015430.495:63024): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316331326163343430346134363461613234393732623730376639653562
type=CRYPTO_KEY_USER msg=audit(1765015430.509:63025): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=476806 suid=74 rport=31566 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015430.510:63026): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476806 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015430.510:63027): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015430.511:63028): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015430.511:63029): pid=476734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765015430.940:63030): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015431.058:63031): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015431.058:63032): pid=476955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015431.062:63033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.062:63034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.075:63035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.075:63036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.077:63037): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477012 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015431.108:63038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.109:63039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.141:63040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.141:63041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.142:63042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477026 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015431.170:63043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.170:63044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.185:63045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.185:63046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.186:63047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477039 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.205:63048): pid=477049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015431.206:63049): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477049 suid=74 rport=31596 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015431.207:63050): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477049 suid=74 rport=31596 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1765015431.221:63051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.221:63052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.238:63053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.238:63054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.240:63055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477059 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015431.284:63056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.284:63057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.300:63058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.300:63059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.302:63060): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477072 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015431.332:63061): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015431.332:63062): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015431.359:63063): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015431.359:63064): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015431.360:63065): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477086 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015431.421:63066): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015431.421:63067): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6165716F71757376667869737170707475786D6B706E6A6E6D64696C68767A6D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353433312E313737373332372D36303436382D37353433343930343235313639302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015431.422:63068): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015431.427:63069): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015431.782:63070): prog-id=2427 op=LOAD
type=SYSCALL msg=audit(1765015431.782:63070): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff86037290 a2=90 a3=9500000000 items=0 ppid=477118 pid=477119 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015431.782:63070): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313662643434303131613737613333373265663466383461636333303464
type=BPF msg=audit(1765015432.331:63071): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015432.461:63072): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015432.461:63073): pid=477101 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015432.466:63074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.466:63075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.485:63076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.485:63077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.486:63078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477157 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.522:63079): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015432.522:63080): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015432.523:63081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.523:63082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.550:63083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.550:63084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765015432.571:63085): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015432.571:63086): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015432.571:63087): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.584:63088): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477184 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_START msg=audit(1765015432.586:63089): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015432.589:63090): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015432.590:63091): pid=477171 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015432.594:63092): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015432.594:63093): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015432.613:63094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.613:63095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.625:63096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.625:63097): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.627:63098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477199 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015432.663:63099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.663:63100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.685:63101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.685:63102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.686:63103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477218 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015432.731:63104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.731:63105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.746:63106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.746:63107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.747:63108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477231 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015432.782:63109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015432.782:63110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015432.796:63111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015432.796:63112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.798:63113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477245 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015432.849:63114): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015432.850:63115): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A736C6C7A6F6F6E7477616169667666677576616266676C6D786864627773203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353433322E363230323337382D36303436382D3132363237313831343734383838322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015432.851:63116): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015432.855:63117): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015432.940:63118): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=477049 suid=74 rport=31596 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015432.941:63119): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477049 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015432.941:63120): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015432.941:63121): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=476995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015432.941:63122): pid=476995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765015433.160:63123): prog-id=2428 op=LOAD
type=SYSCALL msg=audit(1765015433.160:63123): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde9e57b90 a2=90 a3=9500000000 items=0 ppid=477278 pid=477279 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015433.160:63123): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393637393737393736626132666230643866373439616233396534643836
type=CRYPTO_KEY_USER msg=audit(1765015433.397:63124): pid=477302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015433.398:63125): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477302 suid=74 rport=61890 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015433.399:63126): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477302 suid=74 rport=61890 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015433.694:63127): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015433.820:63128): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015433.820:63129): pid=477260 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015433.825:63130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015433.825:63131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015433.843:63132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015433.843:63133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015433.847:63134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477319 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015433.883:63135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015433.883:63136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015433.906:63137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015433.907:63138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015433.951:63139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477333 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015433.984:63140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015433.984:63141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015433.998:63142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015433.998:63143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015434.000:63144): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477346 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015434.037:63145): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015434.037:63146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015434.064:63147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015434.064:63148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015434.066:63149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477365 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015434.114:63150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015434.115:63151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015434.138:63152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015434.138:63153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015434.139:63154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477378 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015434.174:63155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015434.174:63156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015434.188:63157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015434.188:63158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015434.189:63159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477392 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015434.256:63160): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015434.256:63161): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78786E7A68707A7870687A797A6B7771686562716B7778686A6E677678786B6D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353433332E3939313130342D36303436382D3136383535313531363730343432382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015434.258:63162): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015434.262:63163): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015434.595:63164): prog-id=2429 op=LOAD
type=SYSCALL msg=audit(1765015434.595:63164): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff544c7970 a2=90 a3=9500000000 items=0 ppid=477425 pid=477426 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015434.595:63164): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653665353232613337323564303130653734613762393964383539646134
type=CRYPTO_KEY_USER msg=audit(1765015435.055:63165): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=477302 suid=74 rport=61890 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015435.056:63166): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477302 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015435.056:63167): prog-id=0 op=UNLOAD
type=USER_ERR msg=audit(1765015435.056:63168): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015435.057:63169): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015435.057:63170): pid=477272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765015435.172:63171): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015435.173:63172): pid=477407 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015435.177:63173): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.178:63174): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.190:63175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.190:63176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.191:63177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477463 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015435.228:63178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.228:63179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.288:63180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.288:63181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.290:63182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477478 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015435.323:63183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.323:63184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.336:63185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.336:63186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.338:63187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477491 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015435.379:63188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.379:63189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.398:63190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.398:63191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.400:63192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477510 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015435.446:63193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.446:63194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.461:63195): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.461:63196): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.463:63197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477523 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.486:63198): pid=477534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015435.487:63199): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477534 suid=74 rport=61902 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015435.488:63200): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477534 suid=74 rport=61902 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1765015435.498:63201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015435.498:63202): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.513:63203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015435.513:63204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015435.516:63205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477538 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015435.595:63206): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015435.596:63207): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015435.598:63208): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015435.604:63209): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015435.812:63210): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015435.812:63211): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015435.880:63212): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015435.880:63213): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015435.881:63214): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015435.884:63215): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015435.887:63216): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015435.888:63217): pid=477557 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015435.892:63218): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015435.892:63219): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015435.976:63220): prog-id=2430 op=LOAD
type=SYSCALL msg=audit(1765015435.976:63220): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda2e96e40 a2=90 a3=9500000000 items=0 ppid=477585 pid=477586 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015435.976:63220): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343666623161653662336265656234396632643638633366633930306338
type=BPF msg=audit(1765015436.503:63221): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015436.625:63222): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015436.625:63223): pid=477553 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015436.629:63224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015436.629:63225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015436.646:63226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015436.646:63227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015436.649:63228): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477625 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015436.683:63229): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015436.683:63230): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015436.866:63231): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015436.866:63232): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015436.867:63233): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477639 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015436.895:63234): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015436.895:63235): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015436.908:63236): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015436.908:63237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015436.909:63238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477652 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015436.946:63239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015436.947:63240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015436.968:63241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015436.968:63242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015436.970:63243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477671 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015437.017:63244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015437.017:63245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015437.031:63246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015437.031:63247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015437.032:63248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477684 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015437.067:63249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015437.067:63250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015437.084:63251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015437.084:63252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015437.085:63253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477698 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015437.150:63254): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015437.151:63255): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706663737671736A7979646E7A6C686F676966747868786A6F6C707574637276203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353433362E393032303837352D36303536372D36373630383732333036343236302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015437.152:63256): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015437.157:63257): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015437.356:63258): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=477534 suid=74 rport=61902 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015437.357:63259): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477534 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015437.357:63260): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015437.358:63261): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015437.358:63262): pid=477477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765015437.526:63263): prog-id=2431 op=LOAD
type=SYSCALL msg=audit(1765015437.526:63263): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6c90ded0 a2=90 a3=9500000000 items=0 ppid=477730 pid=477731 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015437.526:63263): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623730383863626433613434343965333664616661346638303965363836
type=CRYPTO_KEY_USER msg=audit(1765015437.892:63264): pid=477754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015437.894:63265): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477754 suid=74 rport=61930 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015437.894:63266): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=477754 suid=74 rport=61930 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015437.971:63267): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015438.042:63268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015438.093:63269): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015438.093:63270): pid=477713 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015438.099:63271): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015438.099:63272): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015438.116:63273): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015438.116:63274): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015438.118:63275): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477788 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015438.153:63276): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015438.153:63277): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015438.424:63278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015440.022:63279): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=477754 suid=74 rport=61930 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015440.023:63280): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477754 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015440.023:63281): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015440.024:63282): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015440.024:63283): pid=477734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015443.242:63284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015443.242:63285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015443.244:63286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477815 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015443.275:63287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015443.275:63288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015443.295:63289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015443.296:63290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015443.297:63291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477828 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015443.335:63292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015443.336:63293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015443.361:63294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015443.361:63295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015443.364:63296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477847 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015443.425:63297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015443.425:63298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015443.441:63299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015443.441:63300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015443.444:63301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477860 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015443.482:63302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015443.482:63303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015443.502:63304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015443.502:63305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015443.504:63306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477874 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015443.574:63307): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015443.575:63308): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A6770787A6A766D7861796E626C75767A686C7665796878786E64626D6974203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353434332E323834343831332D36303536372D3236373736303037393937373033332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015443.576:63309): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015443.582:63310): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015443.926:63311): prog-id=2432 op=LOAD
type=SYSCALL msg=audit(1765015443.926:63311): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf21691f0 a2=90 a3=9500000000 items=0 ppid=477906 pid=477907 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015443.926:63311): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363838303737626332363664363061306264326339373264313937633166
type=SERVICE_START msg=audit(1765015444.713:63312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015444.885:63313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015447.580:63314): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015447.727:63315): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015447.728:63316): pid=477889 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015447.733:63317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015447.733:63318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015447.748:63319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015447.748:63320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015447.751:63321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477973 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015447.781:63322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015447.781:63323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015452.809:63324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015452.809:63325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015452.810:63326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=477988 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015452.840:63327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015452.840:63328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015452.852:63329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015452.852:63330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015452.854:63331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478001 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015452.889:63332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015452.889:63333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015452.913:63334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015452.913:63335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015452.915:63336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478020 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015452.956:63337): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015452.956:63338): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015452.970:63339): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015452.970:63340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015452.972:63341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478033 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015452.999:63342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015452.999:63343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015453.015:63344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015453.015:63345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015453.017:63346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478047 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015453.081:63347): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015453.081:63348): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726776626E616671797471776272766E6C6A7264787378676A6B616574656762203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353435322E3834383130372D36303536372D3135303534343739323539373031322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015453.083:63349): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015453.089:63350): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015453.414:63351): prog-id=2433 op=LOAD
type=SYSCALL msg=audit(1765015453.414:63351): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2a370670 a2=90 a3=9500000000 items=0 ppid=478079 pid=478080 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015453.414:63351): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306464313830626334363134643662623033303437646663396336306535
type=USER_LOGIN msg=audit(1765015454.158:63352): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.158:63353): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015454.226:63354): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.226:63355): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.227:63356): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.231:63357): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.235:63358): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015454.235:63359): pid=478093 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.239:63360): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015454.239:63361): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015454.499:63362): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015454.620:63363): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015454.620:63364): pid=478062 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015454.624:63365): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015454.624:63366): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015454.642:63367): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015454.642:63368): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015454.644:63369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478133 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015454.653:63370): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.653:63371): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015454.674:63372): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015454.674:63373): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765015454.713:63374): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.714:63375): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.715:63376): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.718:63377): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.721:63378): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015454.722:63379): pid=478139 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.730:63380): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015454.730:63381): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015454.744:63382): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.744:63383): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015454.801:63384): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.801:63385): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.802:63386): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.805:63387): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015455.387:63388): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015455.388:63389): pid=478162 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015455.457:63390): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015455.458:63391): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015455.713:63392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015455.718:63393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015455.721:63394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015455.819:63395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015456.026:63396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015456.050:63397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015456.113:63398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015456.196:63399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015458.715:63400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015458.719:63401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015458.934:63402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015458.958:63403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015459.701:63404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015459.701:63405): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015459.703:63406): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478380 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015459.732:63407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015459.732:63408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015459.747:63409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015459.747:63410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015459.748:63411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478393 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015459.781:63412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015459.781:63413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015459.799:63414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015459.799:63415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015459.800:63416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478412 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015459.843:63417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015459.843:63418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015459.857:63419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015459.857:63420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015459.859:63421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478425 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015459.889:63422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015459.889:63423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015459.905:63424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015459.905:63425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015459.906:63426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478439 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015459.970:63427): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015459.970:63428): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C6E66716C69696A7177726A7475796872637561786B78696A6A6B6E636974203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353435392E373430353331372D36303536372D3232383237393937343439313931322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015459.972:63429): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015459.977:63430): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015460.325:63431): prog-id=2434 op=LOAD
type=SYSCALL msg=audit(1765015460.325:63431): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd925e3e30 a2=90 a3=9500000000 items=0 ppid=478472 pid=478473 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015460.325:63431): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356532306331346262326330343930353139643264336564623939353635
type=USER_LOGIN msg=audit(1765015460.387:63432): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.387:63433): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.449:63434): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.450:63435): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.450:63436): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.455:63437): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.459:63438): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.459:63439): pid=478476 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.463:63440): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.463:63441): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.464:63442): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.464:63443): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.531:63444): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.531:63445): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.533:63446): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.535:63447): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.539:63448): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.539:63449): pid=478493 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.545:63450): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.545:63451): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.551:63452): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.551:63453): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.607:63454): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.608:63455): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.609:63456): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.611:63457): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.614:63458): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.614:63459): pid=478525 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.618:63460): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.619:63461): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.621:63462): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.621:63463): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.673:63464): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.673:63465): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.674:63466): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.676:63467): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.679:63468): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.679:63469): pid=478540 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.684:63470): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.684:63471): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.689:63472): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.689:63473): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.748:63474): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.748:63475): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.749:63476): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.751:63477): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.754:63478): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.755:63479): pid=478555 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.760:63480): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.760:63481): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.763:63482): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.763:63483): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015460.799:63484): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015460.807:63485): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.807:63486): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.809:63487): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.809:63488): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.874:63489): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.874:63490): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.875:63491): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.877:63492): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.883:63493): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.883:63494): pid=478591 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.888:63495): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.888:63496): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.891:63497): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.891:63498): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015460.932:63499): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015460.933:63500): pid=478454 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015460.937:63501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015460.937:63502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015460.951:63503): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015460.951:63504): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015460.953:63505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478626 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015460.956:63506): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.956:63507): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.957:63508): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.961:63509): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.964:63510): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.964:63511): pid=478612 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.969:63512): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.969:63513): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.972:63514): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.973:63515): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015460.984:63516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015460.984:63517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765015461.023:63518): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.023:63519): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.024:63520): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.027:63521): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.030:63522): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.030:63523): pid=478636 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.035:63524): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.035:63525): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.039:63526): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.039:63527): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.089:63528): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.090:63529): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.090:63530): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.093:63531): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.095:63532): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.096:63533): pid=478656 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.096:63534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015461.097:63535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015461.099:63536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478671 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015461.101:63537): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.101:63538): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.105:63539): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.105:63540): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015461.119:63541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015461.119:63542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015461.135:63543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015461.135:63544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015461.136:63545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478697 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015461.146:63546): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.147:63547): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.147:63548): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.149:63549): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.152:63550): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.152:63551): pid=478677 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.156:63552): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.156:63553): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.159:63554): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.159:63555): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015461.168:63556): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015461.168:63557): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015461.191:63558): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015461.191:63559): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015461.192:63560): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478732 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015461.208:63561): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.208:63562): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.209:63563): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.211:63564): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.213:63565): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.213:63566): pid=478712 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.220:63567): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.220:63568): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015461.230:63569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015461.230:63570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015461.234:63571): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.234:63572): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.242:63573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015461.243:63574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015461.244:63575): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478751 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015461.269:63576): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015461.269:63577): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015461.282:63578): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015461.282:63579): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015461.283:63580): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478774 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015461.290:63581): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.290:63582): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.291:63583): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.294:63584): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.297:63585): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.298:63586): pid=478746 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.301:63587): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.301:63588): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.304:63589): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.304:63590): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.336:63591): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015461.336:63592): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6964646779726B6267676C6277656D767167726865706B74617861646B776F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353436312E313236383132352D36303539392D3231303332333438343334363436392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015461.337:63593): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015461.340:63594): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015461.357:63595): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.357:63596): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.358:63597): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.360:63598): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.362:63599): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.363:63600): pid=478790 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.367:63601): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.367:63602): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.375:63603): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.375:63604): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015461.423:63605): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.423:63606): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.424:63607): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.424:63608): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.472:63609): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.472:63610): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.472:63611): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.475:63612): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.479:63613): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.479:63614): pid=478821 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.482:63615): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.482:63616): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.485:63617): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.485:63618): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.536:63619): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.537:63620): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.538:63621): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.540:63622): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.543:63623): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.543:63624): pid=478836 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.546:63625): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.546:63626): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.548:63627): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.548:63628): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.600:63629): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.601:63630): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.602:63631): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.604:63632): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.608:63633): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.608:63634): pid=478860 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.612:63635): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.612:63636): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015461.660:63637): prog-id=2435 op=LOAD
type=SYSCALL msg=audit(1765015461.660:63637): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1d238f50 a2=90 a3=9500000000 items=0 ppid=478880 pid=478881 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015461.660:63637): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633761366566616661386566323033613163666431303463613630633562
type=USER_LOGIN msg=audit(1765015461.906:63638): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.906:63639): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.966:63640): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.966:63641): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.968:63642): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.971:63643): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.974:63644): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.975:63645): pid=478903 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.979:63646): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.979:63647): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015462.033:63648): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015462.157:63649): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015462.158:63650): pid=478791 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015462.162:63651): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.162:63652): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.179:63653): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.179:63654): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.180:63655): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478936 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015462.213:63656): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.213:63657): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.326:63658): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.326:63659): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.328:63660): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478950 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015462.362:63661): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.362:63662): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.374:63663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.374:63664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.376:63665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478963 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.377:63666): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015462.377:63667): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015462.414:63668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.414:63669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.441:63670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.441:63671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.442:63672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=478996 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015462.443:63673): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015462.443:63674): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015462.444:63675): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015462.448:63676): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015462.451:63677): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015462.452:63678): pid=478964 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015462.458:63679): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015462.458:63680): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015462.463:63681): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015462.463:63682): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015462.496:63683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.496:63684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.511:63685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.511:63686): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.512:63687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479024 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015462.530:63688): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015462.531:63689): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015462.532:63690): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015462.534:63691): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015462.546:63692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015462.546:63693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015462.564:63694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015462.564:63695): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015462.566:63696): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479039 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015462.631:63697): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015462.632:63698): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6270636B776D7364627077757368637161766F7263727579756A6F756178203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353436322E333639353234372D36303631302D3230303237383135303032353634382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015462.632:63699): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015462.635:63700): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015462.969:63701): prog-id=2436 op=LOAD
type=SYSCALL msg=audit(1765015462.969:63701): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdc49c3380 a2=90 a3=9500000000 items=0 ppid=479095 pid=479096 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015462.969:63701): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393161313964656534346130343532653538316161666632636461366239
type=BPF msg=audit(1765015463.079:63702): prog-id=2437 op=LOAD
type=SYSCALL msg=audit(1765015463.079:63702): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcee6e0940 a2=90 a3=9500000000 items=0 ppid=479107 pid=479108 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015463.079:63702): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393038643738636463656434663439343962383562356263633136383139
type=BPF msg=audit(1765015463.131:63703): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015463.258:63704): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015463.258:63705): pid=479008 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015463.263:63706): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015463.263:63707): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015463.303:63708): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015463.303:63709): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015463.366:63710): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015463.366:63711): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015463.367:63712): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015463.371:63713): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015463.374:63714): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015463.374:63715): pid=479146 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015463.380:63716): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015463.380:63717): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015463.380:63718): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015463.380:63719): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015463.427:63720): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015463.445:63721): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015463.445:63722): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015463.446:63723): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015463.450:63724): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015463.565:63725): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015463.565:63726): pid=479054 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015463.570:63727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015463.570:63728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015463.592:63729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015463.592:63730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015463.594:63731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479193 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015463.629:63732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015463.630:63733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015463.987:63734): prog-id=2438 op=LOAD
type=SYSCALL msg=audit(1765015463.987:63734): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe5fe82200 a2=90 a3=9500000000 items=0 ppid=479240 pid=479241 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015463.987:63734): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373532633735346661633464343761363535643431313965613765343138
type=BPF msg=audit(1765015464.039:63735): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015464.108:63736): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.108:63737): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015464.109:63738): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479260 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015464.144:63739): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015464.144:63740): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015464.157:63741): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.157:63742): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015464.158:63743): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479275 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015464.196:63744): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015464.196:63745): pid=479161 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015464.197:63746): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015464.198:63747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765015464.202:63748): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015464.202:63749): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015464.218:63750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.218:63751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015464.250:63752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479294 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015464.286:63753): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015464.286:63754): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015464.305:63755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015464.305:63756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015464.319:63757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.319:63758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015464.321:63759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479320 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015464.352:63760): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015464.352:63761): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015464.353:63762): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015464.354:63763): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015464.354:63764): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.357:63765): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015464.360:63766): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015464.360:63767): pid=479307 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015464.365:63768): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015464.366:63769): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015464.369:63770): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015464.369:63771): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015464.370:63772): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015464.370:63773): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015464.371:63774): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479336 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015464.436:63775): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015464.436:63776): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015464.437:63777): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_ACCT msg=audit(1765015464.437:63778): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015464.438:63779): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63717273636E767478736C726D68636F71787071696D7A6C6274796B706F6A69203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353436342E313531363939332D36303632392D38303438363832363135323534322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015464.440:63780): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015464.440:63781): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015464.442:63782): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015464.774:63783): prog-id=2439 op=LOAD
type=SYSCALL msg=audit(1765015464.774:63783): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe4bba4930 a2=90 a3=9500000000 items=0 ppid=479390 pid=479391 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015464.774:63783): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393062666666643463313037386336326365316263653066643638656138
type=BPF msg=audit(1765015465.001:63784): prog-id=2440 op=LOAD
type=SYSCALL msg=audit(1765015465.001:63784): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcccd40920 a2=90 a3=9500000000 items=0 ppid=479440 pid=479441 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015465.001:63784): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343461356161313335656130646665386131373238323532643331363637
type=BPF msg=audit(1765015465.045:63785): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015465.203:63786): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015465.204:63787): pid=479337 uid=1002 auid=1002 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015465.210:63788): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015465.210:63789): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015465.273:63790): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015465.404:63791): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015465.405:63792): pid=479364 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015465.407:63793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.407:63794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.423:63795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.423:63796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.424:63797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479476 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015465.466:63798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.466:63799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.580:63800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.580:63801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.582:63802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479490 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015465.615:63803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.616:63804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.631:63805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.631:63806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.633:63807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479503 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015465.671:63808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.671:63809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.693:63810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.693:63811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.695:63812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479522 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015465.742:63813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.742:63814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.760:63815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.760:63816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.761:63817): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479535 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015465.795:63818): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015465.796:63819): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015465.814:63820): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015465.814:63821): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015465.816:63822): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479549 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015465.884:63823): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015465.885:63824): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616972767A746774727973786E6A706A6D677477686B6D6F6D666C6D7766666C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353436352E3632323933352D36303634302D3233393632313039303835373531332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015465.887:63825): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015465.891:63826): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015466.175:63827): prog-id=2441 op=LOAD
type=SYSCALL msg=audit(1765015466.175:63827): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeae7d8270 a2=90 a3=9500000000 items=0 ppid=479582 pid=479583 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015466.175:63827): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373461313961393061326638633830303139376261616131656438623534
type=BPF msg=audit(1765015466.687:63828): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015466.813:63829): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015466.813:63830): pid=479564 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015466.816:63831): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015466.816:63832): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015466.831:63833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015466.831:63834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015466.832:63835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479621 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015466.862:63836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015466.862:63837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015467.177:63838): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015467.178:63839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015467.180:63840): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479635 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015467.213:63841): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015467.213:63842): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015467.233:63843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015467.233:63844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015467.235:63845): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479648 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015467.272:63846): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015467.272:63847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015467.299:63848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015467.299:63849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015467.301:63850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479667 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015467.348:63851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015467.348:63852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015467.364:63853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015467.364:63854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015467.365:63855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479680 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015467.397:63856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015467.398:63857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015467.415:63858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015467.415:63859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015467.417:63860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479694 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015467.487:63861): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015467.487:63862): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6273636975646661677761676461776766726F64766772626679787962766F70203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353436372E323230323334392D36303635392D38363234313439393438353336382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015467.488:63863): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015467.493:63864): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015467.838:63865): prog-id=2442 op=LOAD
type=SYSCALL msg=audit(1765015467.838:63865): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff368e0f80 a2=90 a3=9500000000 items=0 ppid=479726 pid=479727 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015467.838:63865): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366233633937343430623464323434633662623661383635346136373538
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63866): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29389 suid=1002 rport=57606 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63867): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29313 suid=1002 rport=49530 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63868): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29001 suid=1002 rport=49504 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63869): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29351 suid=1002 rport=57576 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63870): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29294 suid=1002 rport=49516 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63871): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29332 suid=1002 rport=49536 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63872): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29370 suid=1002 rport=57590 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63873): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29020 suid=1002 rport=49506 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.383:63874): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29425 suid=1002 rport=57624 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.384:63875): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29406 suid=1002 rport=57622 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.384:63876): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28982 suid=1002 rport=49502 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.384:63877): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28981 suid=1002 rport=49486 laddr=172.18.0.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=172.18.0.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015468.390:63878): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.390:63879): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.390:63880): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.390:63881): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.390:63882): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.390:63883): pid=28959 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.390:63884): pid=29367 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.390:63885): pid=29310 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.391:63886): pid=29348 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.391:63887): pid=29329 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.394:63888): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.395:63889): pid=28998 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.413:63890): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.413:63891): pid=29422 uid=0 auid=1002 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.416:63892): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.416:63893): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.416:63894): pid=29403 uid=0 auid=1002 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.416:63895): pid=28976 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.417:63896): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.417:63897): pid=29291 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.417:63898): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.418:63899): pid=29017 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.420:63900): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.420:63901): pid=29386 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=172.18.0.103 addr=172.18.0.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=BPF msg=audit(1765015468.427:63902): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015468.445:63903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015468.552:63904): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015468.552:63905): pid=479709 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015468.557:63906): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015468.557:63907): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015468.570:63908): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015468.570:63909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.571:63910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479805 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015468.606:63911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015468.606:63912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.841:63913): pid=479835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015468.843:63914): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=479835 suid=74 rport=50202 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015468.843:63915): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=479835 suid=74 rport=50202 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015468.874:63916): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015468.874:63917): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015468.878:63918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015468.905:63919): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015468.905:63920): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=479835 suid=74 rport=50202 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015468.907:63921): pid=479834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015468.908:63922): pid=479834 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=252 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015468.908:63922): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffddea7ccb0 a2=4 a3=3ea items=0 ppid=409081 pid=479834 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=252 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015468.908:63922): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015468.909:63923): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015468.946:63924): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.947:63925): pid=479838 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479838 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015468.948:63926): pid=479838 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015468.998:63927): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015468.998:63928): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015469.000:63929): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479839 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015469.066:63930): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015469.067:63931): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015469.069:63932): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015469.074:63933): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015469.079:63934): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015469.079:63935): pid=479839 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015469.085:63936): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015469.085:63937): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015469.092:63938): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015469.092:63939): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015469.094:63940): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479854 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015469.152:63941): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015469.152:63942): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015469.153:63943): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015469.155:63944): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.122:63945): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015471.122:63946): pid=479854 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.127:63947): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015471.127:63948): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015471.224:63949): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015471.224:63950): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015471.226:63951): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480014 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015471.278:63952): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015471.278:63953): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015471.279:63954): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015471.284:63955): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.286:63956): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015471.286:63957): pid=480014 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.290:63958): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015471.290:63959): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015471.294:63960): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015471.294:63961): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015471.295:63962): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480029 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015471.347:63963): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015471.348:63964): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015471.348:63965): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015471.350:63966): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.918:63967): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015471.918:63968): pid=480029 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.014:63969): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.014:63970): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.226:63971): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.226:63972): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.227:63973): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480076 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015472.285:63974): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015472.286:63975): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015472.286:63976): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015472.289:63977): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.292:63978): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015472.292:63979): pid=480076 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.296:63980): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.296:63981): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.302:63982): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.302:63983): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.303:63984): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480091 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015472.361:63985): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015472.361:63986): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015472.362:63987): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015472.364:63988): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.729:63989): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015472.730:63990): pid=480091 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.734:63991): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.734:63992): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.978:63993): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.978:63994): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.979:63995): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480126 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.035:63996): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.035:63997): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.036:63998): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.040:63999): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.043:64000): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.043:64001): pid=480126 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.047:64002): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.047:64003): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.050:64004): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.050:64005): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.051:64006): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480141 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.106:64007): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.106:64008): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.106:64009): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.109:64010): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.113:64011): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.113:64012): pid=480141 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.117:64013): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.117:64014): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.121:64015): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.121:64016): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.123:64017): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480156 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.171:64018): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.171:64019): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.171:64020): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.174:64021): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.176:64022): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.176:64023): pid=480156 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.179:64024): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.179:64025): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.182:64026): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.182:64027): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.183:64028): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480171 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.240:64029): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.240:64030): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.241:64031): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.243:64032): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.246:64033): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.246:64034): pid=480171 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.251:64035): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.251:64036): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.253:64037): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.253:64038): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.255:64039): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480186 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.312:64040): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.312:64041): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.313:64042): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.316:64043): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.319:64044): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.319:64045): pid=480186 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.324:64046): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.324:64047): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.327:64048): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.327:64049): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.329:64050): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480201 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015473.381:64051): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.382:64052): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.384:64053): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.384:64054): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.386:64055): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480214 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.446:64056): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.446:64057): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.447:64058): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.450:64059): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.455:64060): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.455:64061): pid=480214 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.458:64062): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.458:64063): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.460:64064): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.460:64065): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.461:64066): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480229 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.504:64067): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.505:64068): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.505:64069): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.508:64070): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.509:64071): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.510:64072): pid=480229 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.517:64073): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.517:64074): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.530:64075): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.530:64076): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.531:64077): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480244 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.579:64078): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.580:64079): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.580:64080): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.583:64081): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.586:64082): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.586:64083): pid=480244 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.591:64084): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.591:64085): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.595:64086): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.595:64087): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.597:64088): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480259 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.635:64089): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.635:64090): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.636:64091): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.638:64092): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.640:64093): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.640:64094): pid=480259 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.643:64095): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.643:64096): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.645:64097): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.645:64098): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.646:64099): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480274 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.695:64100): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.696:64101): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.696:64102): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.698:64103): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.701:64104): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.701:64105): pid=480274 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.704:64106): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.705:64107): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.708:64108): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.708:64109): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.710:64110): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480289 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.769:64111): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.769:64112): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.769:64113): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.772:64114): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.775:64115): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.776:64116): pid=480289 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.780:64117): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.780:64118): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.786:64119): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.786:64120): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.787:64121): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480304 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.840:64122): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.840:64123): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.841:64124): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.843:64125): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.846:64126): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.846:64127): pid=480304 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.850:64128): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.850:64129): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.852:64130): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.852:64131): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.853:64132): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480319 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.910:64133): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.910:64134): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.911:64135): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.913:64136): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.916:64137): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.916:64138): pid=480319 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.920:64139): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.921:64140): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.926:64141): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.926:64142): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.927:64143): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480334 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015473.972:64144): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.972:64145): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.975:64146): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.975:64147): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.976:64148): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480347 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.035:64149): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.035:64150): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.036:64151): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.039:64152): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.044:64153): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.044:64154): pid=480347 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.047:64155): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.048:64156): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.051:64157): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.051:64158): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.052:64159): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480362 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.089:64160): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.089:64161): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.089:64162): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.092:64163): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.094:64164): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.094:64165): pid=480362 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.100:64166): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.100:64167): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.105:64168): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.105:64169): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.107:64170): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480377 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.158:64171): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.158:64172): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.159:64173): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.162:64174): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.166:64175): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.167:64176): pid=480377 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.178:64177): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.178:64178): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.193:64179): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.193:64180): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.195:64181): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480392 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.254:64182): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.254:64183): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.255:64184): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.259:64185): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.261:64186): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.261:64187): pid=480392 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.268:64188): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.268:64189): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.276:64190): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.276:64191): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.277:64192): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480407 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.333:64193): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.333:64194): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.334:64195): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.337:64196): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.340:64197): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.340:64198): pid=480407 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.386:64199): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.386:64200): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.407:64201): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.407:64202): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.409:64203): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480422 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.456:64204): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.456:64205): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.458:64206): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.460:64207): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.462:64208): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.464:64209): pid=480422 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.471:64210): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.471:64211): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.473:64212): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.473:64213): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.475:64214): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480437 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.528:64215): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.528:64216): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.528:64217): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.530:64218): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.533:64219): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.534:64220): pid=480437 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.537:64221): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.537:64222): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.539:64223): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.539:64224): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.540:64225): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480452 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.591:64226): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.591:64227): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.591:64228): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.594:64229): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.595:64230): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.595:64231): pid=480452 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.598:64232): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.598:64233): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.600:64234): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.600:64235): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.601:64236): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480467 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015474.654:64237): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.654:64238): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.658:64239): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.658:64240): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.659:64241): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480480 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.707:64242): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.708:64243): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.709:64244): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.712:64245): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.716:64246): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.716:64247): pid=480480 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.720:64248): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.720:64249): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.723:64250): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.723:64251): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.724:64252): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480495 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.777:64253): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.777:64254): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.779:64255): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.780:64256): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.784:64257): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.784:64258): pid=480495 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.785:64259): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.785:64260): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.787:64261): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.787:64262): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.789:64263): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480510 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.849:64264): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.850:64265): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.851:64266): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.855:64267): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.858:64268): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.858:64269): pid=480510 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.864:64270): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.864:64271): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.875:64272): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.875:64273): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.876:64274): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480525 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.934:64275): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.934:64276): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.935:64277): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.943:64278): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015474.946:64279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015474.946:64280): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.947:64281): pid=480525 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.951:64282): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.951:64283): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.952:64284): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.953:64285): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.954:64286): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480541 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.011:64287): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.011:64288): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.012:64289): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.016:64290): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.018:64291): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.020:64292): pid=480541 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.026:64293): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.026:64294): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.032:64295): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.032:64296): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.033:64297): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480576 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015475.073:64298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015475.086:64299): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.086:64300): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.086:64301): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.100:64302): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.103:64303): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.106:64304): pid=480576 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.110:64305): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.110:64306): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.115:64307): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.115:64308): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.116:64309): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480594 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.177:64310): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.177:64311): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.178:64312): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.180:64313): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.183:64314): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.184:64315): pid=480594 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.190:64316): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.190:64317): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.198:64318): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.198:64319): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.199:64320): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480609 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.254:64321): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.255:64322): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.256:64323): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.259:64324): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.262:64325): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.263:64326): pid=480609 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.267:64327): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.267:64328): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.273:64329): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.273:64330): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.274:64331): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480628 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015475.347:64332): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.347:64333): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.349:64334): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.349:64335): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.351:64336): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480654 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.411:64337): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.411:64338): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.411:64339): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.414:64340): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.418:64341): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.418:64342): pid=480654 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.422:64343): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.422:64344): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.426:64345): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.426:64346): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.427:64347): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480684 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.466:64348): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.466:64349): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.467:64350): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.469:64351): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.471:64352): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.471:64353): pid=480684 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.474:64354): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.474:64355): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.476:64356): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.477:64357): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.478:64358): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480701 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.517:64359): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.517:64360): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.517:64361): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.519:64362): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.521:64363): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.521:64364): pid=480701 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.524:64365): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.524:64366): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.909:64367): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.909:64368): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.909:64369): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480716 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.969:64370): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.969:64371): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.970:64372): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.973:64373): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.976:64374): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.976:64375): pid=480716 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.980:64376): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.980:64377): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015478.722:64378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015478.722:64379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015478.723:64380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480731 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015478.754:64381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015478.754:64382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015478.767:64383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015478.767:64384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015478.769:64385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480744 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015478.805:64386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015478.806:64387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015478.826:64388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015478.826:64389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015478.828:64390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480763 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015478.879:64391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015478.879:64392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015479.023:64393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015479.023:64394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015479.025:64395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480776 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015479.072:64396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015479.072:64397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015479.088:64398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015479.088:64399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015479.090:64400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480789 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015479.122:64401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015479.123:64402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015479.138:64403): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015479.138:64404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015479.140:64405): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480803 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015479.206:64406): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015479.206:64407): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015479.207:64408): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015479.210:64409): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015479.424:64410): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015479.424:64411): pid=480818 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015479.427:64412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015479.427:64413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015479.735:64414): prog-id=2443 op=LOAD
type=SYSCALL msg=audit(1765015479.735:64414): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3b118b60 a2=90 a3=9500000000 items=0 ppid=480840 pid=480841 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015479.735:64414): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633065643532616430393965376564313538643763313765616431396462
type=BPF msg=audit(1765015480.138:64415): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015480.443:64416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.443:64417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.445:64418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480879 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015480.478:64419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015480.478:64420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015480.492:64421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.492:64422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.493:64423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480892 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015480.519:64424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015480.519:64425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015480.532:64426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.532:64427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.533:64428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480905 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015480.565:64429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015480.565:64430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015480.754:64431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.754:64432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.755:64433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480924 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015480.801:64434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015480.801:64435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015480.815:64436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.815:64437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.817:64438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480937 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015480.848:64439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015480.848:64440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015480.863:64441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015480.863:64442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015480.864:64443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480951 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015480.929:64444): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015480.929:64445): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A616B6A6E70746F79676E62756673626970706D636B7261727171727270706A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438302E353237363638372D36303637312D39323635303233373139313535302F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015480.930:64446): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015480.935:64447): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015481.102:64448): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015481.102:64449): pid=480966 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015481.106:64450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.106:64451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.120:64452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.120:64453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.122:64454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480969 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.145:64455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.145:64456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.160:64457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.160:64458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.161:64459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480982 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.193:64460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.194:64461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.209:64462): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.210:64463): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.211:64464): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=480995 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.238:64465): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.238:64466): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.252:64467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.252:64468): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.253:64469): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481009 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015481.298:64470): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015481.298:64471): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F6662776D6F75787070656967697165656578786776666C6E716B73737376203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438302E353237363638372D36303637312D39323635303233373139313535302F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015481.298:64472): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015481.301:64473): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015481.436:64474): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015481.437:64475): pid=481024 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015481.441:64476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.441:64477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.456:64478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.457:64479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.458:64480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481027 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.487:64481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.488:64482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.776:64483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.777:64484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.778:64485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481041 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.807:64486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.807:64487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.820:64488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.821:64489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.822:64490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481054 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.857:64491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.858:64492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.876:64493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.876:64494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.878:64495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481073 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.924:64496): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.925:64497): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.937:64498): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.937:64499): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.938:64500): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481086 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015481.969:64501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015481.969:64502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015481.984:64503): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015481.985:64504): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015481.986:64505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481100 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015482.049:64506): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015482.049:64507): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D79676A6368677668697A71776D766C6867656C666E69727A6D7873636863203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438312E383135373934322D36303730342D31343934313334393235373834382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015482.050:64508): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015482.053:64509): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015482.350:64510): prog-id=2444 op=LOAD
type=SYSCALL msg=audit(1765015482.350:64510): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe7662f490 a2=90 a3=9500000000 items=0 ppid=481132 pid=481133 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015482.350:64510): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623230303732313766386461646566363638386163333866636433343765
type=BPF msg=audit(1765015482.788:64511): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015482.932:64512): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015482.933:64513): pid=481115 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015482.938:64514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015482.938:64515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015482.951:64516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015482.951:64517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015482.953:64518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481173 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015482.983:64519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015482.983:64520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015483.140:64521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015483.140:64522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.142:64523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481187 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015483.174:64524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015483.175:64525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015483.189:64526): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015483.189:64527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.190:64528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481200 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015483.235:64529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015483.236:64530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015483.255:64531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015483.255:64532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.257:64533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481219 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015483.304:64534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015483.304:64535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015483.323:64536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015483.323:64537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.325:64538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481232 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015483.357:64539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015483.357:64540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015483.374:64541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015483.375:64542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.377:64543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481246 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015483.438:64544): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015483.438:64545): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6778746B686E746270696C766770766367796577717571646B776668686B7472203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438332E313832393033382D36303731332D3233353734373430373435313236372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015483.439:64546): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015483.443:64547): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015483.671:64548): pid=481275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015483.673:64549): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481275 suid=74 rport=40122 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015483.673:64550): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481275 suid=74 rport=40122 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015483.766:64551): prog-id=2445 op=LOAD
type=SYSCALL msg=audit(1765015483.766:64551): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6457e9f0 a2=90 a3=9500000000 items=0 ppid=481279 pid=481280 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015483.766:64551): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303863656439373565396564336663623636333463616161336165323563
type=USER_LOGIN msg=audit(1765015484.214:64552): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015484.214:64553): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015484.215:64554): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481303 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015484.276:64555): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015484.277:64556): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015484.277:64557): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015484.285:64558): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015484.288:64559): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015484.288:64560): pid=481303 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015484.292:64561): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015484.292:64562): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015484.295:64563): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015484.295:64564): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015484.296:64565): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481328 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=BPF msg=audit(1765015484.351:64566): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015484.354:64567): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015484.355:64568): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015484.355:64569): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015484.359:64570): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015485.471:64571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mon.np0005548785 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015485.847:64572): prog-id=2446 op=LOAD
type=BPF msg=audit(1765015485.847:64573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.847:64574): prog-id=2447 op=LOAD
type=BPF msg=audit(1765015485.847:64575): prog-id=2448 op=LOAD
type=BPF msg=audit(1765015485.847:64576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.847:64577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.849:64578): prog-id=2449 op=LOAD
type=BPF msg=audit(1765015485.849:64579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.853:64580): prog-id=2450 op=LOAD
type=BPF msg=audit(1765015485.853:64581): prog-id=2451 op=LOAD
type=BPF msg=audit(1765015485.853:64582): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.853:64583): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.860:64584): prog-id=2452 op=LOAD
type=BPF msg=audit(1765015485.860:64585): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.862:64586): prog-id=2453 op=LOAD
type=BPF msg=audit(1765015485.862:64587): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.862:64588): prog-id=2454 op=LOAD
type=BPF msg=audit(1765015485.862:64589): prog-id=2455 op=LOAD
type=BPF msg=audit(1765015485.862:64590): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015485.862:64591): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015485.909:64592): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015485.910:64593): pid=481328 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015485.917:64594): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015485.917:64595): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015485.971:64596): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015486.039:64597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015486.074:64598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015486.092:64599): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015486.092:64600): pid=481261 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015486.097:64601): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.097:64602): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015486.110:64603): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.110:64604): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.112:64605): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481515 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015486.148:64606): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.148:64607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015486.162:64608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015486.264:64609): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=481275 suid=74 rport=40122 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015486.265:64610): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481275 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015486.267:64611): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015486.267:64612): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015486.267:64613): pid=481172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015486.283:64614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015486.313:64615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015486.401:64616): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.401:64617): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.402:64618): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481615 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015486.415:64619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015486.433:64620): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.433:64621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015486.448:64622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.448:64623): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.449:64624): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481631 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015486.483:64625): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.483:64626): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015486.508:64627): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.509:64628): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.510:64629): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481656 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015486.511:64630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015486.542:64631): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.543:64632): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015486.555:64633): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.555:64634): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.556:64635): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481669 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015486.578:64636): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015486.578:64637): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015486.595:64638): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015486.595:64639): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.597:64640): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481684 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015486.611:64641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015486.658:64642): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015486.659:64643): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C6C647868636B766F737676656B796E767A63746D69746F61767A6B756B63203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438362E3434303338392D36303732382D3236303530343433333132323835392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015486.660:64644): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015486.666:64645): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015486.864:64646): pid=481712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015486.865:64647): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481712 suid=74 rport=40140 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015486.865:64648): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481712 suid=74 rport=40140 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015486.997:64649): prog-id=2456 op=LOAD
type=SYSCALL msg=audit(1765015486.997:64649): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe08021d50 a2=90 a3=9500000000 items=0 ppid=481718 pid=481719 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015486.997:64649): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366663646163356237663537663235643566323562316365303338313331
type=CRYPTO_KEY_USER msg=audit(1765015488.817:64650): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=481712 suid=74 rport=40140 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015488.818:64651): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481712 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015488.819:64652): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015488.820:64653): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015488.820:64654): pid=481630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015489.371:64655): pid=481742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015489.374:64656): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481742 suid=74 rport=40158 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015489.374:64657): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=481742 suid=74 rport=40158 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015489.617:64658): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015489.620:64659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015489.623:64660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015489.733:64661): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015489.733:64662): pid=481699 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015489.737:64663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015489.737:64664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015489.756:64665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015489.756:64666): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015489.757:64667): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481784 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015489.790:64668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015489.790:64669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015489.828:64670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015489.828:64671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015489.829:64672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481815 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015489.858:64673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015489.858:64674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015489.874:64675): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015489.874:64676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015489.875:64677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481833 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015489.884:64678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015489.900:64679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015489.914:64680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015489.914:64681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015489.934:64682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015489.934:64683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015489.935:64684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481854 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015489.980:64685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015489.980:64686): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015489.995:64687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015489.995:64688): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015489.996:64689): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481867 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015490.028:64690): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015490.029:64691): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015490.044:64692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015490.044:64693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015490.046:64694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481881 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015490.105:64695): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015490.106:64696): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63616D63646B6964656B6E796774656665636E706A65626565657A786A70656A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353438392E383637313731332D36303732382D3231373137373434363639373737382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015490.108:64697): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015490.113:64698): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015490.415:64699): prog-id=2457 op=LOAD
type=SYSCALL msg=audit(1765015490.415:64699): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2bc68b90 a2=90 a3=9500000000 items=0 ppid=481913 pid=481914 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015490.415:64699): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653736376333383436323133303832663065613965636239336666326562
type=BPF msg=audit(1765015490.957:64700): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015491.063:64701): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015491.063:64702): pid=481896 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015491.068:64703): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.068:64704): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.081:64705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.081:64706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.082:64707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481954 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015491.116:64708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.116:64709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.144:64710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.144:64711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.146:64712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481968 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015491.179:64713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.179:64714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.193:64715): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.193:64716): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.195:64717): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481981 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015491.233:64718): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.233:64719): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.249:64720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.250:64721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.251:64722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482000 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015491.297:64723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.298:64724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.312:64725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.312:64726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.313:64727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482013 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015491.346:64728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015491.346:64729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015491.361:64730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015491.361:64731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.363:64732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482027 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015491.425:64733): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015491.425:64734): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776968786270756C7079737579706D6A636C77727371657879766679626D646F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353439312E3138373937352D36303732382D3137303333383331353732303433362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015491.426:64735): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015491.431:64736): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015491.485:64737): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=481742 suid=74 rport=40158 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015491.486:64738): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481742 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015491.487:64739): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015491.487:64740): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=481732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015491.487:64741): pid=481732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765015491.784:64742): prog-id=2458 op=LOAD
type=SYSCALL msg=audit(1765015491.784:64742): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff3b82030 a2=90 a3=9500000000 items=0 ppid=482061 pid=482062 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015491.784:64742): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333237396265373566646134356137306534336635656236353430363839
type=CRYPTO_KEY_USER msg=audit(1765015492.118:64743): pid=482084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015492.120:64744): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=482084 suid=74 rport=63498 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015492.120:64745): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=482084 suid=74 rport=63498 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765015492.240:64746): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015492.363:64747): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015492.364:64748): pid=482042 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015492.369:64749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015492.369:64750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015492.385:64751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015492.385:64752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015492.387:64753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482102 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015492.422:64754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015492.422:64755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015494.561:64756): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=482084 suid=74 rport=63498 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015494.562:64757): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482084 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015494.563:64758): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015494.563:64759): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015494.564:64760): pid=482051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015495.003:64761): pid=482117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015497.990:64762): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=482117 suid=74 rport=63508 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015497.990:64763): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=482117 suid=74 rport=63508 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765015499.716:64764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015499.873:64765): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=482117 suid=74 rport=63508 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015499.874:64766): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482117 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015499.874:64767): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015499.875:64768): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015499.875:64769): pid=482116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015500.056:64770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015501.786:64771): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015501.787:64772): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015501.788:64773): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482146 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015501.855:64774): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015501.856:64775): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015501.857:64776): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015501.862:64777): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015501.865:64778): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015501.865:64779): pid=482146 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015501.870:64780): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015501.870:64781): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015501.874:64782): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015501.874:64783): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015501.876:64784): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482161 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015501.936:64785): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015501.937:64786): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015501.937:64787): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015501.940:64788): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015502.567:64789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015502.567:64790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015502.570:64791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482218 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015502.604:64792): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015502.604:64793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015502.616:64794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015502.616:64795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015502.617:64796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482232 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015502.659:64797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015502.659:64798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015502.676:64799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015502.676:64800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015502.678:64801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482261 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015502.718:64802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015502.718:64803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015502.730:64804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015502.730:64805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015502.731:64806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482282 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015502.765:64807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015502.765:64808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015502.786:64809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015502.786:64810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015502.789:64811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482309 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015502.857:64812): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015502.858:64813): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656178796A64696B62686C646F766B6B79687967777367716279646C706A656B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353530322E363131343833362D36303735342D31363937383531303432373830392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015502.858:64814): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015502.862:64815): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015503.152:64816): prog-id=2459 op=LOAD
type=SYSCALL msg=audit(1765015503.152:64816): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3c208ab0 a2=90 a3=9500000000 items=0 ppid=482382 pid=482383 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015503.152:64816): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383435646137626139356562623233383939633533643162336361366333
type=USER_END msg=audit(1765015503.219:64817): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.219:64818): pid=482161 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.224:64819): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.224:64820): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.289:64821): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.289:64822): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.290:64823): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482393 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.354:64824): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.354:64825): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.355:64826): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.360:64827): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.364:64828): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.364:64829): pid=482393 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.370:64830): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.370:64831): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.379:64832): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.379:64833): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.380:64834): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482427 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.434:64835): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.435:64836): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.436:64837): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.438:64838): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.441:64839): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.441:64840): pid=482427 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.446:64841): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.446:64842): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.450:64843): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.450:64844): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.451:64845): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482442 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.494:64846): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.494:64847): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=726D202D66202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.495:64848): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.496:64849): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.498:64850): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.499:64851): pid=482442 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.503:64852): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.503:64853): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015503.676:64854): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015503.783:64855): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015503.784:64856): pid=482324 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015503.788:64857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015503.788:64858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015503.810:64859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015503.810:64860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.812:64861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482473 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015503.844:64862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015503.844:64863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015503.988:64864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015503.988:64865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.990:64866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482487 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015504.020:64867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015504.020:64868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015504.037:64869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015504.037:64870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.039:64871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482500 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015504.073:64872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015504.073:64873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015504.102:64874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015504.102:64875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.104:64876): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482519 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015504.148:64877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015504.148:64878): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015504.165:64879): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015504.165:64880): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.167:64881): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482532 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015504.197:64882): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015504.197:64883): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015504.217:64884): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015504.217:64885): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.218:64886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482546 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015504.287:64887): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015504.287:64888): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70646F6C6C6863756D72746B6974766C776A657A756670617076666F75786862203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353530342E3032383031362D36303736352D37313832303434363330373335312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015504.287:64889): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015504.290:64890): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015504.601:64891): prog-id=2460 op=LOAD
type=SYSCALL msg=audit(1765015504.601:64891): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff44c40b50 a2=90 a3=9500000000 items=0 ppid=482578 pid=482579 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015504.601:64891): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363863643164366638383731373139666636303064666535623833316237
type=USER_LOGIN msg=audit(1765015504.860:64892): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.861:64893): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.864:64894): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482601 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.927:64895): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.927:64896): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.928:64897): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.932:64898): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.935:64899): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.936:64900): pid=482601 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.940:64901): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.940:64902): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.943:64903): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.943:64904): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.944:64905): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482616 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015505.009:64906): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015505.010:64907): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015505.010:64908): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015505.013:64909): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015505.063:64910): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015505.109:64911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015505.185:64912): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015505.185:64913): pid=482561 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015505.189:64914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.189:64915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015505.203:64916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.203:64917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.204:64918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482659 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015505.237:64919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.237:64920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015505.326:64921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015505.337:64922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.337:64923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.339:64924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482687 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015505.371:64925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.371:64926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015505.386:64927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.386:64928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.389:64929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482710 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015505.422:64930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.422:64931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015505.447:64932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.447:64933): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.448:64934): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482740 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015505.497:64935): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.497:64936): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015505.516:64937): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.517:64938): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.519:64939): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015505.545:64940): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015505.545:64941): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015505.560:64942): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015505.560:64943): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015505.562:64944): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015505.630:64945): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015505.630:64946): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74697566786E64626C6A666265797A7876727971737374726C6C686978617172203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353530352E333738333633312D36303737342D3237393738393639333937313234322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015505.632:64947): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015505.636:64948): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015505.957:64949): prog-id=2461 op=LOAD
type=SYSCALL msg=audit(1765015505.957:64949): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffefe7cbf60 a2=90 a3=9500000000 items=0 ppid=482832 pid=482833 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015505.957:64949): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373165306233333164393531333263613235303166336538303931303735
type=BPF msg=audit(1765015506.173:64950): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1765015506.389:64951): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=479838 suid=1002 rport=50202 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.391:64952): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479838 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015506.393:64953): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015506.394:64954): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015506.394:64955): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015506.394:64956): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.394:64957): pid=479834 uid=0 auid=1002 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=479834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=BPF msg=audit(1765015506.438:64958): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015506.556:64959): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015506.556:64960): pid=482792 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015506.560:64961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015506.560:64962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015506.574:64963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015506.575:64964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.577:64965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482939 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015506.611:64966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015506.611:64967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015506.763:64968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@crash.np0005548785 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015506.854:64969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015506.854:64970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.855:64971): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=482958 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015506.893:64972): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015506.893:64973): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015506.906:64974): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015506.906:64975): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.908:64976): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483003 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015506.940:64977): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015506.940:64978): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015506.960:64979): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015506.960:64980): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.962:64981): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483024 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.004:64982): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.004:64983): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.018:64984): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.018:64985): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.019:64986): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483037 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.045:64987): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.045:64988): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.059:64989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.059:64990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.061:64991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483051 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=BPF msg=audit(1765015507.076:64992): prog-id=2462 op=LOAD
type=BPF msg=audit(1765015507.076:64993): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.077:64994): prog-id=2463 op=LOAD
type=BPF msg=audit(1765015507.077:64995): prog-id=2464 op=LOAD
type=BPF msg=audit(1765015507.077:64996): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.077:64997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.078:64998): prog-id=2465 op=LOAD
type=BPF msg=audit(1765015507.078:64999): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.082:65000): prog-id=2466 op=LOAD
type=BPF msg=audit(1765015507.082:65001): prog-id=2467 op=LOAD
type=BPF msg=audit(1765015507.082:65002): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.082:65003): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.089:65004): prog-id=2468 op=LOAD
type=BPF msg=audit(1765015507.089:65005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.091:65006): prog-id=2469 op=LOAD
type=BPF msg=audit(1765015507.091:65007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.091:65008): prog-id=2470 op=LOAD
type=BPF msg=audit(1765015507.091:65009): prog-id=2471 op=LOAD
type=BPF msg=audit(1765015507.091:65010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015507.091:65011): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015507.127:65012): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015507.127:65013): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D726C6E636E61697376656D6F6B626D71786272716F66706A767164706E6264203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353530362E393031333933342D36303738392D39333831353434343636353132372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015507.129:65014): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015507.143:65015): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015507.143:65016): pid=482616 uid=1002 auid=1002 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015507.152:65017): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015507.293:65018): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015507.293:65019): pid=483066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015507.297:65020): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.297:65021): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.310:65022): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.310:65023): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.311:65024): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483073 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.337:65025): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.339:65026): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.467:65027): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.467:65028): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.469:65029): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483087 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.494:65030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.495:65031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.506:65032): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.506:65033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.507:65034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483100 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.540:65035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.540:65036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.559:65037): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.559:65038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.560:65039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483119 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.603:65040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.604:65041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.616:65042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.616:65043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.617:65044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483132 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.648:65045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.648:65046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.662:65047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.662:65048): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.663:65049): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483146 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015507.721:65050): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015507.722:65051): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A646D70697477656666667068726C616174726162717072696D7569617664203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353530372E353033303239362D36303830302D3230333632313332373539303032302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015507.722:65052): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015507.726:65053): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015507.886:65054): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015507.887:65055): pid=483161 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015507.890:65056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.890:65057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015507.904:65058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015507.904:65059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.906:65060): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483165 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015507.928:65061): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015507.928:65062): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015513.096:65063): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015513.096:65064): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015513.098:65065): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483179 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015513.129:65066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015513.129:65067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015513.143:65068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015513.143:65069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015513.145:65070): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483192 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015513.182:65071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015513.182:65072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015513.200:65073): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015513.200:65074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015513.201:65075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483211 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015513.245:65076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015513.245:65077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015513.259:65078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015513.260:65079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015513.261:65080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483224 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015513.292:65081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015513.292:65082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015513.306:65083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015513.306:65084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015513.308:65085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483238 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015513.373:65086): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015513.373:65087): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747075796E6E6370667A7571777A747277626F646E7A766778656270686B7970203B20434550485F434F4E5441494E45525F494D4147453D72656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C617465737420434550485F434F4E5441494E45525F42494E4152593D706F646D616E20434550485F434F4E463D2F686F6D652F747269706C656F2D61646D696E2F636570685F636C69656E74202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353531332E3133373234332D36303834392D3230313538303930363537363535362F416E736962616C6C5A5F636570685F6D6B737065632E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015513.374:65088): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015513.381:65089): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015513.812:65090): prog-id=2472 op=LOAD
type=SYSCALL msg=audit(1765015513.812:65090): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd01c6af0 a2=90 a3=9500000000 items=0 ppid=483270 pid=483271 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015513.812:65090): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366364646337653562353437353534393231353363623464636464343761
type=BPF msg=audit(1765015514.302:65091): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015514.401:65092): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015514.402:65093): pid=483253 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015514.408:65094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.408:65095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.423:65096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.423:65097): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.426:65098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483309 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015514.461:65099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.462:65100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.577:65101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.577:65102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.579:65103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483323 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015514.603:65104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.603:65105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.616:65106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.616:65107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.618:65108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483336 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015514.646:65109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.646:65110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.672:65111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.672:65112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.674:65113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483355 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015514.717:65114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.717:65115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.733:65116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.733:65117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.735:65118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483368 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015514.763:65119): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015514.764:65120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015514.788:65121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015514.789:65122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015514.791:65123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483382 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015514.859:65124): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015514.859:65125): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C7277656878666B6F6C786F757975686E736B6870786E70657A686A67746B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353531342E3631313637322D36303836302D35363131383532333734323235382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015514.861:65126): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015514.867:65127): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015515.219:65128): prog-id=2473 op=LOAD
type=SYSCALL msg=audit(1765015515.219:65128): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce3013c60 a2=90 a3=9500000000 items=0 ppid=483414 pid=483415 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015515.219:65128): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323238643438336365333464663662363262313636333731343866616432
type=BPF msg=audit(1765015515.673:65129): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015515.820:65130): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015515.821:65131): pid=483397 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015515.826:65132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015515.826:65133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015515.843:65134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015515.843:65135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015515.844:65136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483454 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015515.879:65137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015515.880:65138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015515.969:65139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015515.969:65140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015515.971:65141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483468 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015516.001:65142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015516.001:65143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015516.026:65144): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015516.026:65145): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015516.028:65146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483481 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015516.065:65147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015516.065:65148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015516.086:65149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015516.086:65150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015516.088:65151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483500 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015516.135:65152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015516.136:65153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015516.150:65154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015516.151:65155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015516.153:65156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483513 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015516.186:65157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015516.186:65158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015516.204:65159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015516.204:65160): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015516.207:65161): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483527 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015516.276:65162): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015516.276:65163): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F786D7765696F76686263756E6D74626F6D6962756C7A78726F677869736A72203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353531362E303130373134332D36303836392D3139313531323137333737393239352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015516.278:65164): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015516.284:65165): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015516.607:65166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015516.610:65167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015516.613:65168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015516.642:65169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015516.669:65170): prog-id=2474 op=LOAD
type=SYSCALL msg=audit(1765015516.669:65170): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffec9a1e400 a2=90 a3=9500000000 items=0 ppid=483577 pid=483581 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015516.669:65170): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396330373333336265626134323039323835366462383539326630623064
type=SERVICE_STOP msg=audit(1765015516.927:65171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015516.953:65172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015516.959:65173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015517.145:65174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015517.209:65175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015517.250:65176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015517.736:65177): pid=483703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015517.943:65178): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=483703 suid=74 rport=53732 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015517.943:65179): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=483703 suid=74 rport=53732 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015518.884:65180): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=483703 suid=74 rport=53732 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015518.884:65181): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483703 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015518.885:65182): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.10.175.77 addr=45.10.175.77 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015518.886:65183): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015518.886:65184): pid=483702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015520.712:65185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015520.716:65186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015520.969:65187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015520.994:65188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015522.275:65189): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015522.413:65190): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015522.414:65191): pid=483542 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015522.420:65192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015522.420:65193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015522.434:65194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015522.434:65195): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015522.437:65196): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483769 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015522.474:65197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015522.474:65198): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015530.789:65199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015531.161:65200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015532.621:65201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015532.621:65202): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.623:65203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483811 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015532.659:65204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015532.659:65205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015532.673:65206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015532.673:65207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.675:65208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483824 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015532.714:65209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015532.715:65210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015532.738:65211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015532.738:65212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.740:65213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483843 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015532.787:65214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015532.787:65215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015532.800:65216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015532.800:65217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.802:65218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483856 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015532.833:65219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015532.833:65220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015532.860:65221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015532.860:65222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.863:65223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=483870 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015532.932:65224): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015532.933:65225): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7176796A706470697574616163716D6F63796D6F7A726F716D6D75756F6F7569203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353533322E363636363239382D36303838352D3138383534323039303733343132372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015532.934:65226): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015532.940:65227): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015533.284:65228): prog-id=2475 op=LOAD
type=SYSCALL msg=audit(1765015533.284:65228): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff660ac6c0 a2=90 a3=9500000000 items=0 ppid=483903 pid=483904 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015533.284:65228): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323761666562363638306631653033333061326165633638333165636163
type=SERVICE_START msg=audit(1765015535.565:65229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015535.773:65230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015536.701:65231): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015536.829:65232): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015536.830:65233): pid=483885 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015536.835:65234): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015536.835:65235): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015536.852:65236): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015536.852:65237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.855:65238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484001 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015536.889:65239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015536.889:65240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015547.010:65241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015547.010:65242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015547.012:65243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484015 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015547.042:65244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015547.042:65245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015547.055:65246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015547.055:65247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015547.056:65248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484028 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015547.091:65249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015547.091:65250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015547.112:65251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015547.112:65252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015547.113:65253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484047 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015547.156:65254): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015547.156:65255): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015547.173:65256): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015547.173:65257): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015547.174:65258): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015547.204:65259): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015547.204:65260): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015547.219:65261): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015547.219:65262): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015547.221:65263): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484074 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015547.283:65264): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015547.284:65265): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7362706A6379787776737A75716F687A6D7A7A716470756D726C7A6D6A6975203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353534372E303530323330332D36303839372D3237313932343435373831373432342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015547.285:65266): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015547.305:65267): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015547.308:65268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015547.311:65269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015547.314:65270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015547.318:65271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015547.539:65272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015547.627:65273): prog-id=2476 op=LOAD
type=SYSCALL msg=audit(1765015547.627:65273): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee3d21d40 a2=90 a3=9500000000 items=0 ppid=484200 pid=484202 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015547.627:65273): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333564393563653432363766643461666333663332313834366639643633
type=SERVICE_STOP msg=audit(1765015547.668:65274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015547.773:65275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015547.869:65276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015548.058:65277): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015548.204:65278): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015548.204:65279): pid=484089 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015548.211:65280): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.211:65281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.224:65282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.224:65283): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.226:65284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484259 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015548.262:65285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.262:65286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.356:65287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.356:65288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.358:65289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484273 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015548.391:65290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.391:65291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.404:65292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.404:65293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.406:65294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484286 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015548.446:65295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.446:65296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.468:65297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.468:65298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.469:65299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484305 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015548.515:65300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.515:65301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.527:65302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.527:65303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.529:65304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484318 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015548.561:65305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015548.561:65306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015548.576:65307): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015548.576:65308): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015548.578:65309): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484332 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015548.645:65310): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015548.646:65311): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70676E636579766570656E6E7868696E63746471776A7A6F6E7567736B66786C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353534382E333939372D36303930362D36313734323833333932343933342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015548.646:65312): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015548.652:65313): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015549.017:65314): prog-id=2477 op=LOAD
type=SYSCALL msg=audit(1765015549.017:65314): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc4fa18600 a2=90 a3=9500000000 items=0 ppid=484364 pid=484365 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015549.017:65314): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616533316237306635346561373737393939383562656663393936393463
type=BPF msg=audit(1765015549.811:65315): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015549.940:65316): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015549.941:65317): pid=484347 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015549.945:65318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015549.945:65319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015549.959:65320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015549.959:65321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015549.960:65322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484404 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015549.995:65323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015549.995:65324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015550.272:65325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015550.272:65326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015550.274:65327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484418 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015550.307:65328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015550.307:65329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015550.323:65330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015550.324:65331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015550.325:65332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484431 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015550.361:65333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015550.361:65334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015550.386:65335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015550.386:65336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015550.388:65337): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484450 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015550.431:65338): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015550.431:65339): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015550.444:65340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015550.444:65341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015550.445:65342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484463 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015550.475:65343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015550.475:65344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015550.491:65345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015550.491:65346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015550.493:65347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484477 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015550.555:65348): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015550.555:65349): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D78776D69756D6C666C62776E796B64646F686A6B677A626A66616F61686C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353535302E333136303031322D36303932312D3132353532313333353731383234302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015550.556:65350): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015550.560:65351): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015550.889:65352): prog-id=2478 op=LOAD
type=SYSCALL msg=audit(1765015550.889:65352): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9aa58250 a2=90 a3=9500000000 items=0 ppid=484510 pid=484511 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015550.889:65352): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313336613738333736386638333163323737383136336535383334343266
type=BPF msg=audit(1765015551.412:65353): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015551.415:65354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015551.419:65355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015551.510:65356): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015551.510:65357): pid=484492 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015551.515:65358): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015551.515:65359): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015551.532:65360): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015551.532:65361): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.533:65362): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484569 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015551.559:65363): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015551.559:65364): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015551.653:65365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015551.683:65366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015561.670:65367): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.670:65368): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.671:65369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484610 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015561.709:65370): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015561.709:65371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015561.713:65372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015561.722:65373): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.722:65374): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.724:65375): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484624 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015561.762:65376): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015561.762:65377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015561.780:65378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.780:65379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.781:65380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484652 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015561.829:65381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015561.829:65382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015561.848:65383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.848:65384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.849:65385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484678 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015561.895:65386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015561.895:65387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015561.908:65388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.909:65389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.910:65390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484691 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015561.940:65391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015561.940:65392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015561.955:65393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015561.955:65394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015561.956:65395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484708 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015562.008:65396): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015562.008:65397): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015562.009:65398): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015562.012:65399): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015562.105:65400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015562.200:65401): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015562.201:65402): pid=484723 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015562.205:65403): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015562.205:65404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015562.477:65405): prog-id=2479 op=LOAD
type=SYSCALL msg=audit(1765015562.477:65405): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe8ebb19f0 a2=90 a3=9500000000 items=0 ppid=484755 pid=484756 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015562.477:65405): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383633623032383139356532623933613736646233376131613038316264
type=BPF msg=audit(1765015562.927:65406): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015563.229:65407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.229:65408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.232:65409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484794 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.264:65410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.265:65411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.281:65412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.281:65413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.283:65414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484807 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.315:65415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.315:65416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.329:65417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.329:65418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.331:65419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484820 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.365:65420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.365:65421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.387:65422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.387:65423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.388:65424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484839 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.432:65425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.432:65426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.454:65427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.454:65428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.455:65429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484852 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.485:65430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.485:65431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.502:65432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.502:65433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.504:65434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484866 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015563.570:65435): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015563.570:65436): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777863777476697865626D6F7A7665796B71627361676675767863726E66726F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353536332E3332323433392D36303933332D3134383832303234373037353630382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015563.572:65437): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015563.576:65438): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015563.749:65439): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015563.749:65440): pid=484881 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015563.754:65441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.754:65442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.771:65443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.771:65444): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.772:65445): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484884 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.800:65446): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.801:65447): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.822:65448): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.822:65449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.823:65450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484897 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.869:65451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.869:65452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.883:65453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.884:65454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.885:65455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484910 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015563.918:65456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015563.918:65457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015563.933:65458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015563.933:65459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015563.935:65460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484924 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015563.998:65461): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015563.998:65462): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A786B687A71757976736B666E716B687762626E657168766C687474687065203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353536332E3332323433392D36303933332D3134383832303234373037353630382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015563.999:65463): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015564.002:65464): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015564.184:65465): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015564.184:65466): pid=484939 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015564.188:65467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.188:65468): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.206:65469): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.206:65470): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.208:65471): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484942 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015564.237:65472): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.237:65473): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.397:65474): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.397:65475): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.399:65476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484956 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015564.429:65477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.429:65478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.442:65479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.442:65480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.444:65481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484969 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015564.480:65482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.480:65483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.500:65484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.500:65485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.501:65486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=484988 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015564.545:65487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.545:65488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.559:65489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.559:65490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.560:65491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485001 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015564.591:65492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015564.591:65493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015564.605:65494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015564.605:65495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015564.607:65496): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485015 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015564.671:65497): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015564.671:65498): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015564.672:65499): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015564.674:65500): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015565.080:65501): prog-id=2480 op=LOAD
type=SYSCALL msg=audit(1765015565.080:65501): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff66f684c0 a2=90 a3=9500000000 items=0 ppid=485047 pid=485048 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015565.080:65501): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616432656363333430613266343764626633663564353230343164656162
type=BPF msg=audit(1765015565.565:65502): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015565.654:65503): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015565.655:65504): pid=485030 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015565.659:65505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015565.659:65506): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015565.672:65507): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015565.672:65508): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.674:65509): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485086 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015565.706:65510): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015565.706:65511): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015565.887:65512): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015565.888:65513): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.889:65514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485100 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015565.919:65515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015565.919:65516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015565.930:65517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015565.930:65518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.932:65519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485113 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015565.966:65520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015565.966:65521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015565.984:65522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015565.985:65523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.986:65524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485132 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015566.033:65525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015566.033:65526): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015566.045:65527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015566.046:65528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015566.047:65529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485145 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015566.078:65530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015566.079:65531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015566.094:65532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015566.094:65533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015566.096:65534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485159 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015566.160:65535): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015566.161:65536): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E6472687663676C7671676C68717976686B79797063746378687A69716876203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353536352E393235393831352D36303937332D3134363638313533393337383836322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015566.162:65537): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015566.182:65538): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015566.184:65539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015566.355:65540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015566.515:65541): prog-id=2481 op=LOAD
type=SYSCALL msg=audit(1765015566.515:65541): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd3a543fb0 a2=90 a3=9500000000 items=0 ppid=485216 pid=485217 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015566.515:65541): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303836393238643539306362323030326362633437376133633864353232
type=BPF msg=audit(1765015567.025:65542): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015567.126:65543): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015567.127:65544): pid=485174 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015567.131:65545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.131:65546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.146:65547): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.146:65548): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.148:65549): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485255 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015567.182:65550): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.182:65551): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.493:65552): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.493:65553): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.494:65554): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485269 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015567.521:65555): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.522:65556): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.534:65557): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.535:65558): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.536:65559): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485282 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015567.572:65560): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.573:65561): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.593:65562): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.593:65563): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.595:65564): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485301 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015567.642:65565): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.642:65566): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.658:65567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.658:65568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.660:65569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485314 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015567.691:65570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015567.691:65571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015567.709:65572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015567.709:65573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.711:65574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485328 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015567.784:65575): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015567.785:65576): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D78636F6474636E7074637569737174686D66657473767462706D7061796465203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353536372E353239303735362D36303939302D36313730343339363838303037352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015567.786:65577): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015567.792:65578): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015568.108:65579): prog-id=2482 op=LOAD
type=SYSCALL msg=audit(1765015568.108:65579): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6ba246a0 a2=90 a3=9500000000 items=0 ppid=485360 pid=485361 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015568.108:65579): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366139623665646165643833666630636164383838333834343238646664
type=BPF msg=audit(1765015568.642:65580): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015568.757:65581): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015568.758:65582): pid=485343 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015568.762:65583): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015568.762:65584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015568.784:65585): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015568.785:65586): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015568.787:65587): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485399 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015568.820:65588): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015568.820:65589): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015572.264:65590): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015572.264:65591): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015572.266:65592): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485413 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015572.298:65593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015572.298:65594): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015572.312:65595): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015572.313:65596): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015572.314:65597): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485426 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015572.351:65598): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015572.351:65599): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015572.370:65600): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015572.370:65601): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015572.372:65602): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485445 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015572.418:65603): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015572.418:65604): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015572.430:65605): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015572.431:65606): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015572.433:65607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485458 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015572.459:65608): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015572.459:65609): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015572.475:65610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015572.475:65611): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015572.476:65612): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485472 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015572.540:65613): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015572.541:65614): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E77797963787A696C62727A6972616970686677786E6F736E6E6E66696275203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353537322E333035363731372D36313034362D3134323230313833303530383832302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015572.542:65615): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015572.548:65616): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015572.903:65617): prog-id=2483 op=LOAD
type=SYSCALL msg=audit(1765015572.903:65617): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe1e0ae50 a2=90 a3=9500000000 items=0 ppid=485503 pid=485504 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015572.903:65617): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343064616535666662336661353636353530343364323665303433636635
type=BPF msg=audit(1765015573.303:65618): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015573.405:65619): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015573.406:65620): pid=485487 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015573.410:65621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.410:65622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.424:65623): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.425:65624): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.426:65625): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485543 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015573.456:65626): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.456:65627): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.749:65628): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.749:65629): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.751:65630): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485557 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015573.784:65631): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.784:65632): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.797:65633): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.798:65634): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.799:65635): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485570 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015573.836:65636): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.836:65637): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.860:65638): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.860:65639): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.861:65640): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485589 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015573.903:65641): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.903:65642): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.916:65643): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.916:65644): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.918:65645): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485602 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015573.948:65646): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015573.948:65647): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015573.964:65648): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015573.964:65649): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015573.965:65650): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485616 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015574.029:65651): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015574.029:65652): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74696A7673646771756767786C656866756C6A6E646561656A6E67757A71726D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353537332E373932333230332D36313036372D35363333343030313736393135332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015574.031:65653): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015574.034:65654): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015574.335:65655): prog-id=2484 op=LOAD
type=SYSCALL msg=audit(1765015574.335:65655): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8171e680 a2=90 a3=9500000000 items=0 ppid=485649 pid=485650 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015574.335:65655): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636661333664366365663139663039363630653663356639353835386131
type=BPF msg=audit(1765015574.780:65656): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015574.893:65657): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015574.894:65658): pid=485631 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015574.898:65659): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015574.898:65660): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015574.910:65661): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015574.910:65662): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015574.912:65663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485688 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015574.942:65664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015574.942:65665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015577.712:65666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015577.715:65667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015577.831:65668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015577.931:65669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015577.994:65670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015577.995:65671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015578.159:65672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015578.159:65673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015578.160:65674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485814 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015578.172:65675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015578.186:65676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015578.187:65677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015578.204:65678): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015578.204:65679): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015578.205:65680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485829 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015578.233:65681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015578.233:65682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015578.261:65683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015578.261:65684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015578.262:65685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485848 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015578.293:65686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015578.307:65687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015578.307:65688): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015578.325:65689): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015578.325:65690): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015578.327:65691): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485862 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015578.355:65692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015578.355:65693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015578.371:65694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015578.371:65695): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015578.372:65696): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485876 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015578.439:65697): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015578.440:65698): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863766C77646362626464796572727663636C6A6E687762787063646F736B71203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353537382E313935333136332D36313039332D33393438323435393432353833322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015578.442:65699): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015578.447:65700): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015578.745:65701): prog-id=2485 op=LOAD
type=SYSCALL msg=audit(1765015578.745:65701): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2f876ab0 a2=90 a3=9500000000 items=0 ppid=485911 pid=485912 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015578.745:65701): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356234383938343432653532613030316466666130666132636633323237
type=BPF msg=audit(1765015579.224:65702): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015579.321:65703): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015579.322:65704): pid=485891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015579.326:65705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.326:65706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.341:65707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.341:65708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.343:65709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485950 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015579.368:65710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.368:65711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.399:65712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.399:65713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.401:65714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485964 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015579.428:65715): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.428:65716): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.450:65717): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.451:65718): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.452:65719): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485977 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015579.485:65720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.485:65721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.506:65722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.507:65723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.508:65724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=485996 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015579.554:65725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.555:65726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.578:65727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.578:65728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.579:65729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486010 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015579.607:65730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015579.607:65731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015579.633:65732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015579.633:65733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.634:65734): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486024 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015579.686:65735): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015579.686:65736): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75676C6F71666A6E75697863637878797967626E77656E7A6D6B7A70706C6F75203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353537392E3433363835382D36313039332D3138363539313730323137373931332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015579.687:65737): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015579.692:65738): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015579.972:65739): prog-id=2486 op=LOAD
type=SYSCALL msg=audit(1765015579.972:65739): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc9268f170 a2=90 a3=9500000000 items=0 ppid=486055 pid=486056 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015579.972:65739): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323063653837656463653732633736623539303434663930303962356233
type=BPF msg=audit(1765015580.459:65740): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015580.580:65741): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015580.580:65742): pid=486039 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015580.586:65743): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015580.587:65744): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.300:65745): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.300:65746): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.302:65747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486094 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015581.333:65748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015581.333:65749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.363:65750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.363:65751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.365:65752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486108 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015581.390:65753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015581.390:65754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.405:65755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.405:65756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.406:65757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486121 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015581.442:65758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015581.442:65759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.466:65760): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.466:65761): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.468:65762): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486140 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015581.518:65763): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015581.518:65764): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.533:65765): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.533:65766): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.535:65767): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486153 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015581.565:65768): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015581.565:65769): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015581.581:65770): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015581.582:65771): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015581.584:65772): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486167 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015581.651:65773): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015581.651:65774): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616878747A67756C6463726A66796466756368656D746265696473777675736C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353538312E333938393530332D36313039332D3230333931383138393930363538362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015581.652:65775): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015581.667:65776): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015581.668:65777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015581.710:65778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015581.886:65779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015581.971:65780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015581.987:65781): prog-id=2487 op=LOAD
type=SYSCALL msg=audit(1765015581.987:65781): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd72aeb820 a2=90 a3=9500000000 items=0 ppid=486248 pid=486249 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015581.987:65781): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626636313537656131663238323737663364313734313636333564323336
type=BPF msg=audit(1765015582.454:65782): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015582.564:65783): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015582.565:65784): pid=486182 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015582.571:65785): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015582.571:65786): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015582.583:65787): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015582.583:65788): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015582.585:65789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486288 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015582.625:65790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015582.626:65791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015592.709:65792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015593.115:65793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015594.337:65794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015594.337:65795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015594.339:65796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486330 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015594.373:65797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015594.373:65798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015594.385:65799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015594.385:65800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015594.387:65801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486343 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015594.421:65802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015594.421:65803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015594.440:65804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015594.441:65805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015594.442:65806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486362 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015594.486:65807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015594.486:65808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015594.501:65809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015594.501:65810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015594.502:65811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486375 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015594.535:65812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015594.535:65813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015594.549:65814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015594.549:65815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015594.551:65816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486389 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015594.619:65817): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015594.620:65818): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726367696F626173626477617661796E77636B64616379777264657576797361203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353539342E333830323637342D36313133332D3233383038383032323631333736322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015594.622:65819): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015594.627:65820): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015594.984:65821): prog-id=2488 op=LOAD
type=SYSCALL msg=audit(1765015594.984:65821): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe14dfc9c0 a2=90 a3=9500000000 items=0 ppid=486422 pid=486423 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015594.984:65821): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336633356434316137303133643332313839366434373063356265333338
type=BPF msg=audit(1765015595.477:65822): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015595.567:65823): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015595.568:65824): pid=486404 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015595.572:65825): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.572:65826): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.584:65827): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.584:65828): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.586:65829): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486461 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015595.617:65830): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.617:65831): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.694:65832): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.694:65833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.696:65834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486492 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015595.728:65835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.728:65836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.742:65837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.742:65838): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.744:65839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486510 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015595.781:65840): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.782:65841): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.804:65842): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.804:65843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.805:65844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486537 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015595.851:65845): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.851:65846): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.867:65847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.867:65848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.868:65849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486555 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015595.900:65850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015595.900:65851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015595.914:65852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015595.914:65853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015595.916:65854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486569 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015595.972:65855): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015595.973:65856): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75706967726F6F75757979646B7A656175627864737666676D746D716C696C79203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353539352E3733353635332D36313134322D3130383033393038373435313231332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015595.974:65857): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015595.977:65858): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015596.258:65859): prog-id=2489 op=LOAD
type=SYSCALL msg=audit(1765015596.258:65859): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3c3aff00 a2=90 a3=9500000000 items=0 ppid=486601 pid=486602 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015596.258:65859): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166313333643536333339366231303939633361303235313565353631
type=SERVICE_START msg=audit(1765015596.708:65860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015596.709:65861): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015596.895:65862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015596.941:65863): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015596.941:65864): pid=486584 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015596.945:65865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015596.945:65866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015596.961:65867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015596.961:65868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015596.962:65869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486661 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015596.990:65870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015596.990:65871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015603.727:65872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015603.728:65873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.730:65874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486675 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015603.761:65875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015603.762:65876): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015603.787:65877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015603.787:65878): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.789:65879): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486688 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015603.823:65880): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015603.823:65881): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015603.856:65882): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015603.856:65883): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.857:65884): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486707 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015603.902:65885): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015603.903:65886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015603.925:65887): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015603.925:65888): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.927:65889): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486720 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015603.957:65890): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015603.957:65891): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015603.977:65892): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015603.977:65893): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.979:65894): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486734 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015604.041:65895): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015604.042:65896): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015604.042:65897): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015604.048:65898): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015604.387:65899): prog-id=2490 op=LOAD
type=SYSCALL msg=audit(1765015604.387:65899): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff837931d0 a2=90 a3=9500000000 items=0 ppid=486766 pid=486767 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015604.387:65899): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343662333562383736613739306131363062316137383662323961633835
type=BPF msg=audit(1765015604.857:65900): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015604.967:65901): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015604.968:65902): pid=486749 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015604.972:65903): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015604.972:65904): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015604.990:65905): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015604.990:65906): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015604.992:65907): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486806 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015605.023:65908): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015605.023:65909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015605.137:65910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015605.137:65911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.139:65912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486820 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015605.170:65913): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015605.170:65914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015605.187:65915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015605.187:65916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.188:65917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486833 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015605.224:65918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015605.224:65919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015605.253:65920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015605.253:65921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.254:65922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486852 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015605.300:65923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015605.301:65924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015605.319:65925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015605.319:65926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.320:65927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486865 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015605.352:65928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015605.352:65929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015605.369:65930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015605.369:65931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.390:65932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486879 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015605.454:65933): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015605.454:65934): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766871757A6E63796D79796F78716F646B686579797969647469627472786F74203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353630352E313737383837372D36313233322D3231343938363230353438303631382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015605.455:65935): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015605.459:65936): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015605.788:65937): prog-id=2491 op=LOAD
type=SYSCALL msg=audit(1765015605.788:65937): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc21749e00 a2=90 a3=9500000000 items=0 ppid=486911 pid=486912 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015605.788:65937): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346132643131636266323066663930376234393461313262363336376338
type=BPF msg=audit(1765015606.194:65938): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015606.300:65939): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015606.300:65940): pid=486894 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015606.304:65941): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.304:65942): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.325:65943): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.325:65944): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.326:65945): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486950 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015606.353:65946): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.353:65947): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.485:65948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.485:65949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.487:65950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486964 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015606.517:65951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.518:65952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.533:65953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.533:65954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.534:65955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486977 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015606.572:65956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.572:65957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.595:65958): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.595:65959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.596:65960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=486996 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015606.650:65961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.650:65962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.667:65963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.667:65964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.669:65965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487009 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015606.700:65966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015606.701:65967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015606.717:65968): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015606.717:65969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.719:65970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487023 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015606.784:65971): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015606.784:65972): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70737364726B62716D647873626C73637573726E626C7075726977717563786C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353630362E3532363230372D36313234312D3235343236343737343839393037332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015606.786:65973): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015606.791:65974): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015607.102:65975): prog-id=2492 op=LOAD
type=SYSCALL msg=audit(1765015607.102:65975): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcec35f460 a2=90 a3=9500000000 items=0 ppid=487056 pid=487057 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015607.102:65975): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376232313132613464633734356137623762396134323364316632323263
type=SERVICE_START msg=audit(1765015608.721:65976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015608.726:65977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015608.729:65978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015608.732:65979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015609.004:65980): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015609.050:65981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015609.071:65982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015609.136:65983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015609.185:65984): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015609.185:65985): pid=487038 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015609.191:65986): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015609.191:65987): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015609.208:65988): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015609.208:65989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015609.210:65990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487209 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015609.228:65991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015609.251:65992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015609.251:65993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015612.714:65994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015612.718:65995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015612.915:65996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015612.940:65997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015619.443:65998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015619.443:65999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015619.444:66000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487272 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015619.478:66001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015619.478:66002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015619.491:66003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015619.491:66004): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015619.492:66005): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487285 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015619.527:66006): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015619.528:66007): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015619.546:66008): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015619.546:66009): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015619.547:66010): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487304 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015619.589:66011): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015619.589:66012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015619.603:66013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015619.603:66014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015619.604:66015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487317 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015619.634:66016): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015619.634:66017): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015619.648:66018): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015619.649:66019): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015619.651:66020): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487331 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015619.715:66021): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015619.715:66022): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B786F6C6C656C6C756F74696961656C68676C637464666C6B797769727A6A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353631392E343836303537332D36313235352D3230333637323938363739373137352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015619.717:66023): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015619.722:66024): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015620.047:66025): prog-id=2493 op=LOAD
type=SYSCALL msg=audit(1765015620.047:66025): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff86bba4c0 a2=90 a3=9500000000 items=0 ppid=487363 pid=487364 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015620.047:66025): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333165393334303331393130666136663332656563336631323734366638
type=BPF msg=audit(1765015623.230:66026): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015623.231:66027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015623.378:66028): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015623.378:66029): pid=487346 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015623.385:66030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015623.385:66031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015623.398:66032): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015623.398:66033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015623.400:66034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487416 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015623.433:66035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015623.433:66036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015623.719:66037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015627.711:66038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015627.915:66039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015633.547:66040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015633.547:66041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015633.549:66042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487489 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015633.582:66043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015633.582:66044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015633.595:66045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015633.595:66046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015633.596:66047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487502 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015633.634:66048): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015633.634:66049): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015633.653:66050): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015633.653:66051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015633.654:66052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487521 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015633.701:66053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015633.701:66054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015633.715:66055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015633.715:66056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015633.717:66057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487534 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015633.751:66058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015633.751:66059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015633.766:66060): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015633.766:66061): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015633.768:66062): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487548 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015633.827:66063): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015633.827:66064): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D79697A646377647878686F6C61766F6679796D71697A746C6C6F7379677470203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353633332E353839373533322D36313236372D31323332303935323039333236382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015633.828:66065): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015633.836:66066): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015634.167:66067): prog-id=2494 op=LOAD
type=SYSCALL msg=audit(1765015634.167:66067): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe1e325fc0 a2=90 a3=9500000000 items=0 ppid=487580 pid=487581 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015634.167:66067): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346535633166636235666365363138366535356564636530386339346637
type=BPF msg=audit(1765015634.673:66068): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015634.794:66069): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015634.795:66070): pid=487563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015634.800:66071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015634.800:66072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015634.812:66073): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015634.812:66074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015634.814:66075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487620 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015634.850:66076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015634.850:66077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015634.957:66078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015634.958:66079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015634.960:66080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487634 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015634.994:66081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015634.994:66082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015635.010:66083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015635.010:66084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015635.012:66085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487647 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015635.053:66086): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015635.053:66087): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015635.082:66088): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015635.082:66089): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015635.084:66090): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487666 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015635.146:66091): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015635.146:66092): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015635.166:66093): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015635.166:66094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015635.168:66095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487679 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015635.211:66096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015635.211:66097): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015635.238:66098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015635.238:66099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015635.240:66100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487693 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015635.310:66101): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015635.310:66102): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B736C7962706C656F6F787866656369657569747974776C797A6A6B72686B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353633352E303031373535322D36313237362D3138313139323632333832353934332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015635.311:66103): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015635.316:66104): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015635.625:66105): prog-id=2495 op=LOAD
type=SYSCALL msg=audit(1765015635.625:66105): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcae76aed0 a2=90 a3=9500000000 items=0 ppid=487725 pid=487726 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015635.625:66105): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333831333932326633623665313736333264663663663765333065623062
type=BPF msg=audit(1765015636.288:66106): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015636.415:66107): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015636.415:66108): pid=487708 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015636.420:66109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.420:66110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.437:66111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.437:66112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.439:66113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487764 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015636.472:66114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.473:66115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.706:66116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.706:66117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.708:66118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487778 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015636.739:66119): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.739:66120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.754:66121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.755:66122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.756:66123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487791 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015636.797:66124): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.797:66125): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.822:66126): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.823:66127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.824:66128): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487810 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015636.879:66129): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.879:66130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.901:66131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.901:66132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.902:66133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487823 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015636.933:66134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015636.934:66135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015636.952:66136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015636.952:66137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.954:66138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487837 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015637.022:66139): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015637.022:66140): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766974766162687279626F746F796D72676F656F686F6579796565646B647462203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353633362E373436393438372D36313239312D38363734303631393039313238322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015637.023:66141): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015637.027:66142): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015637.368:66143): prog-id=2496 op=LOAD
type=SYSCALL msg=audit(1765015637.368:66143): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9701fec0 a2=90 a3=9500000000 items=0 ppid=487869 pid=487870 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015637.368:66143): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663731376161633766333661633661363363616539343730343637396237
type=BPF msg=audit(1765015637.922:66144): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015638.023:66145): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015638.023:66146): pid=487852 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015638.028:66147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015638.028:66148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015638.042:66149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015638.042:66150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015638.045:66151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=487908 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015638.082:66152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015638.083:66153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015639.714:66154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015639.718:66155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015639.722:66156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015639.726:66157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015640.108:66158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015640.127:66159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015640.155:66160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015640.156:66161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015643.712:66162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015643.716:66163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015643.903:66164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015644.006:66165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015648.187:66166): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.187:66167): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.189:66168): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488093 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015648.226:66169): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.226:66170): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015648.239:66171): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.239:66172): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.241:66173): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488106 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015648.281:66174): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.281:66175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015648.301:66176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.301:66177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.303:66178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488125 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015648.353:66179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.353:66180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015648.369:66181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.369:66182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.370:66183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488138 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015648.412:66184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.412:66185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015648.427:66186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.427:66187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.429:66188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488151 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015648.464:66189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.465:66190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015648.479:66191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015648.479:66192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015648.481:66193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488165 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015648.557:66194): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015648.557:66195): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015648.559:66196): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015648.565:66197): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015648.791:66198): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015648.792:66199): pid=488180 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015648.797:66200): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015648.797:66201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015649.099:66202): prog-id=2497 op=LOAD
type=SYSCALL msg=audit(1765015649.099:66202): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce58b2010 a2=90 a3=9500000000 items=0 ppid=488202 pid=488203 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015649.099:66202): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633738303435376165346661393236386533346539663636633437313563
type=USER_LOGIN msg=audit(1765015649.823:66203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015649.824:66204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015649.826:66205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488227 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015649.863:66206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015649.864:66207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015649.876:66208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015649.877:66209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015649.878:66210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488240 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015649.915:66211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015649.916:66212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015649.927:66213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015649.928:66214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015649.929:66215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488253 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015649.968:66216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015649.968:66217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015649.985:66218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015649.985:66219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015649.987:66220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488272 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015650.040:66221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015650.040:66222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015650.055:66223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015650.055:66224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015650.057:66225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488285 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015650.091:66226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015650.092:66227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015650.108:66228): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015650.108:66229): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015650.111:66230): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488299 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015650.180:66231): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015650.180:66232): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70746C666F7A676378756C64786E6D74736D7A6C74746E70706B6E78616B7469203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015650.182:66233): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015650.188:66234): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015650.325:66235): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015650.325:66236): pid=488314 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015650.329:66237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015650.330:66238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015651.349:66239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015651.349:66240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015651.351:66241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488317 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015651.386:66242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015651.386:66243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015651.406:66244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015651.406:66245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015651.407:66246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488330 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015651.455:66247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015651.456:66248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015651.469:66249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015651.469:66250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015651.471:66251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488343 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015651.506:66252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015651.506:66253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015651.524:66254): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015651.524:66255): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015651.526:66256): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488357 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015651.583:66257): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015651.583:66258): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A796368696276736A75736165756F73736E77746F73766F6875747068716E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015651.584:66259): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015651.588:66260): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015651.764:66261): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015651.765:66262): pid=488372 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015651.770:66263): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015651.770:66264): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015652.788:66265): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015652.788:66266): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015652.790:66267): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488375 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015652.824:66268): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015652.824:66269): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015652.842:66270): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015652.842:66271): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015652.844:66272): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488388 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015652.890:66273): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015652.890:66274): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015652.909:66275): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015652.910:66276): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015652.911:66277): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488401 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015652.944:66278): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015652.945:66279): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015652.958:66280): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015652.958:66281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015652.960:66282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488415 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015653.032:66283): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015653.034:66284): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73727A75696D6A676B666A777667676E7575616D6A6773686E71756771676373203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015653.035:66285): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015653.038:66286): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015653.205:66287): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015653.205:66288): pid=488430 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015653.209:66289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015653.209:66290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015654.230:66291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015654.230:66292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015654.231:66293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488433 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015654.263:66294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015654.263:66295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015654.285:66296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015654.285:66297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015654.286:66298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488446 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015654.336:66299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015654.336:66300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015654.357:66301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015654.357:66302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015654.358:66303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488459 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015654.387:66304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015654.387:66305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015654.400:66306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015654.401:66307): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015654.403:66308): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488473 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015654.466:66309): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015654.467:66310): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7579716D796B6B6276746B6D6A73706372686B676F65656A7468716D65667472203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015654.467:66311): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015654.484:66312): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015654.487:66313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015654.661:66314): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015654.662:66315): pid=488488 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015654.666:66316): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015654.666:66317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015654.855:66318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015655.687:66319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015655.687:66320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015655.689:66321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488519 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015655.722:66322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015655.722:66323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015655.741:66324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015655.741:66325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015655.742:66326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488532 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015655.790:66327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015655.790:66328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015655.809:66329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015655.809:66330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015655.812:66331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488548 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015655.850:66332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015655.850:66333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015655.864:66334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015655.864:66335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015655.867:66336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488573 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015655.940:66337): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015655.941:66338): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D6466626E72646565677A69647773706366706F7566666A6F6663736A6E61203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015655.943:66339): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015655.948:66340): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015656.121:66341): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015656.121:66342): pid=488588 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015656.126:66343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015656.126:66344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015657.147:66345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015657.147:66346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015657.149:66347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488607 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015657.181:66348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015657.181:66349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015657.201:66350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015657.201:66351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015657.203:66352): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488620 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015657.251:66353): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015657.251:66354): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015657.265:66355): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015657.265:66356): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015657.267:66357): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488633 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015657.299:66358): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015657.299:66359): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015657.318:66360): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015657.318:66361): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015657.320:66362): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488647 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015657.372:66363): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015657.373:66364): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61686B6667616D6E687665776B7A736B656B686D746A63716B76697062636D7A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015657.373:66365): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015657.377:66366): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015657.558:66367): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015657.559:66368): pid=488662 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015657.562:66369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015657.562:66370): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015658.581:66371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015658.581:66372): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015658.583:66373): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488665 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015658.616:66374): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015658.616:66375): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015658.639:66376): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015658.639:66377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015658.640:66378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488678 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015658.688:66379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015658.688:66380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015658.704:66381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015658.704:66382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015658.706:66383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488691 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015658.713:66384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015658.738:66385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015658.739:66386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015658.754:66387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015658.754:66388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015658.756:66389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488716 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015658.814:66390): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015658.815:66391): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6671706665766A646773766F61627163747971636467767862767470667868203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015658.816:66392): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015658.820:66393): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015658.907:66394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015658.986:66395): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015658.987:66396): pid=488731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015658.990:66397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015658.990:66398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015660.008:66399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015660.008:66400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015660.010:66401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488746 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015660.044:66402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015660.045:66403): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015660.062:66404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015660.062:66405): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015660.064:66406): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488759 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015660.105:66407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015660.105:66408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015660.122:66409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015660.122:66410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015660.123:66411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488772 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015660.156:66412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015660.156:66413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015660.170:66414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015660.170:66415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015660.171:66416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488786 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015660.236:66417): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015660.236:66418): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6973696B6377646B6F6474666F76797869626D636466736A787A6D7561686E78203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015660.238:66419): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015660.241:66420): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015660.415:66421): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015660.415:66422): pid=488801 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015660.420:66423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015660.420:66424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015661.440:66425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015661.440:66426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015661.442:66427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488804 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015661.474:66428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015661.474:66429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015661.494:66430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015661.494:66431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015661.496:66432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488817 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015661.543:66433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015661.543:66434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015661.560:66435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015661.560:66436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015661.562:66437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488830 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015661.590:66438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015661.590:66439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015661.606:66440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015661.606:66441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015661.608:66442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488844 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015661.664:66443): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015661.664:66444): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D77616C76786972796D676F7669726D616C726665716E706D71696E63686E65203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015661.665:66445): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015661.668:66446): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015661.821:66447): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015661.821:66448): pid=488859 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015661.825:66449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015661.825:66450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015662.843:66451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015662.843:66452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015662.845:66453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488862 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015662.872:66454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015662.872:66455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015662.889:66456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015662.889:66457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015662.891:66458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488875 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015662.934:66459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015662.934:66460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015662.948:66461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015662.948:66462): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015662.950:66463): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488888 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015662.985:66464): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015662.985:66465): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015663.001:66466): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015663.001:66467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015663.003:66468): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488902 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015663.098:66469): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015663.099:66470): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D6A646974696F726762676B7971637A7466736F7073716F656676676D6661203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015663.099:66471): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015663.101:66472): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015663.279:66473): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015663.279:66474): pid=488917 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015663.283:66475): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015663.283:66476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015664.300:66477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015664.301:66478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015664.302:66479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488920 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015664.338:66480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015664.338:66481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015664.358:66482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015664.358:66483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015664.360:66484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488933 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015664.406:66485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015664.406:66486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015664.421:66487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015664.421:66488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015664.423:66489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488946 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015664.455:66490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015664.455:66491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015664.469:66492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015664.469:66493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015664.471:66494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488960 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015664.526:66495): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015664.526:66496): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74646E666C6872737067737965706C766B6B647476756F717673746370747868203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015664.526:66497): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015664.529:66498): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015664.706:66499): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015664.706:66500): pid=488975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015664.710:66501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015664.710:66502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015665.728:66503): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015665.728:66504): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015665.730:66505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488978 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015665.765:66506): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015665.765:66507): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015665.783:66508): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015665.783:66509): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015665.785:66510): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=488991 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015665.835:66511): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015665.835:66512): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015665.858:66513): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015665.858:66514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015665.860:66515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489004 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015665.895:66516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015665.895:66517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015665.916:66518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015665.916:66519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015665.918:66520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489018 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015665.988:66521): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015665.989:66522): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79747264686F696B656775666E647A637A6C66656263776479726D746379736A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015665.990:66523): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015665.993:66524): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015666.154:66525): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015666.155:66526): pid=489033 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015666.159:66527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015666.159:66528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015667.181:66529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015667.181:66530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015667.183:66531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489036 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015667.216:66532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015667.216:66533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015667.242:66534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015667.242:66535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015667.244:66536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489049 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015667.291:66537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015667.291:66538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015667.309:66539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015667.309:66540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015667.311:66541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489062 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015667.344:66542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015667.344:66543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015667.362:66544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015667.362:66545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015667.364:66546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489076 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015667.429:66547): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015667.429:66548): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B6162727364667A6A61776A67787875646E6978616A63726877687868766D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015667.430:66549): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015667.433:66550): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015667.603:66551): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015667.604:66552): pid=489091 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015667.608:66553): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015667.608:66554): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015668.627:66555): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015668.627:66556): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015668.629:66557): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489094 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015668.664:66558): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015668.664:66559): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015668.683:66560): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015668.683:66561): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015668.685:66562): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489107 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015668.730:66563): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015668.730:66564): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015668.745:66565): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015668.745:66566): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015668.747:66567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489120 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015668.781:66568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015668.781:66569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015668.795:66570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015668.795:66571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015668.797:66572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489134 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015668.861:66573): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015668.861:66574): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A647375726B747A7A7A636E616A6C63657779617170727767757A64657175203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015668.862:66575): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015668.865:66576): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015669.024:66577): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015669.024:66578): pid=489149 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015669.028:66579): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015669.028:66580): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015670.047:66581): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015670.047:66582): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015670.048:66583): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489152 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015670.079:66584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015670.080:66585): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015670.097:66586): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015670.097:66587): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015670.098:66588): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489165 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015670.150:66589): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015670.150:66590): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015670.172:66591): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015670.172:66592): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015670.174:66593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489178 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015670.206:66594): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015670.206:66595): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015670.223:66596): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015670.223:66597): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015670.224:66598): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489192 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015670.292:66599): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015670.293:66600): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62726B6C707871637464636E7A65767964736F6A7677677566666178646C7769203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015670.294:66601): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015670.314:66602): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015670.316:66603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015670.320:66604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015670.324:66605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015670.328:66606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015670.473:66607): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015670.473:66608): pid=489207 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015670.477:66609): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015670.477:66610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015670.658:66611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015670.676:66612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015670.698:66613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015670.731:66614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015671.494:66615): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015671.494:66616): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015671.496:66617): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489324 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015671.527:66618): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015671.527:66619): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015671.548:66620): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015671.548:66621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015671.550:66622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489337 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015671.596:66623): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015671.596:66624): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015671.612:66625): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015671.612:66626): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015671.614:66627): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489350 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015671.646:66628): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015671.646:66629): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015671.665:66630): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015671.665:66631): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015671.666:66632): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489364 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015671.730:66633): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015671.731:66634): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C756F6467636676687367786D637766777A63666B6763617964676A697470203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015671.732:66635): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015671.738:66636): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015671.912:66637): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015671.912:66638): pid=489379 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015671.916:66639): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015671.916:66640): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015672.939:66641): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015672.940:66642): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015672.941:66643): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489382 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015672.971:66644): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015672.971:66645): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015672.987:66646): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015672.987:66647): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015672.988:66648): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489395 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015673.022:66649): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015673.022:66650): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015673.034:66651): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015673.034:66652): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015673.035:66653): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489408 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015673.057:66654): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015673.057:66655): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015673.069:66656): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015673.069:66657): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015673.072:66658): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489422 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015673.127:66659): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015673.127:66660): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A736E74776973776B647472756477646C73777A716778796A71717579707768203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015673.129:66661): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015673.131:66662): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015673.274:66663): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015673.274:66664): pid=489437 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015673.278:66665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015673.278:66666): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015674.301:66667): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015674.301:66668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015674.303:66669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489440 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015674.335:66670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015674.335:66671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015674.353:66672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015674.354:66673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015674.355:66674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489453 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015674.401:66675): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015674.401:66676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015674.421:66677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015674.421:66678): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015674.422:66679): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489466 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015674.460:66680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015674.460:66681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015674.476:66682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015674.476:66683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015674.478:66684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489480 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015674.543:66685): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015674.543:66686): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B75656971627768726164736C68737A74766E76736D62706E747578656A786E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015674.544:66687): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015674.565:66688): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015674.570:66689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015674.575:66690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015674.743:66691): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015674.744:66692): pid=489495 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015674.748:66693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015674.748:66694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015674.821:66695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015674.901:66696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015675.767:66697): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015675.767:66698): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015675.768:66699): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489546 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015675.803:66700): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015675.803:66701): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015675.822:66702): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015675.822:66703): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015675.823:66704): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489559 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015675.869:66705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015675.869:66706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015675.886:66707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015675.886:66708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015675.887:66709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489572 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015675.921:66710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015675.921:66711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015675.937:66712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015675.937:66713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015675.938:66714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489586 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015676.007:66715): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015676.007:66716): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B617A65776E716F6C6863647A737973747274756B6C787A6D726866766873203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015676.008:66717): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015676.013:66718): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015676.185:66719): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015676.185:66720): pid=489601 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015676.189:66721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015676.189:66722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015677.206:66723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015677.206:66724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015677.208:66725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489604 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015677.240:66726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015677.240:66727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015677.260:66728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015677.260:66729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015677.262:66730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489617 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015677.308:66731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015677.308:66732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015677.322:66733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015677.322:66734): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015677.324:66735): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489630 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015677.356:66736): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015677.357:66737): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015677.370:66738): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015677.371:66739): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015677.373:66740): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489644 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015677.446:66741): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015677.446:66742): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6973736567696772656E6B6C7163786278717877766F6373626A6B73776A6667203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015677.447:66743): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015677.450:66744): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015677.615:66745): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015677.615:66746): pid=489659 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015677.620:66747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015677.620:66748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015678.637:66749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015678.637:66750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015678.639:66751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489662 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015678.672:66752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015678.672:66753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015678.691:66754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015678.691:66755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015678.692:66756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489675 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015678.740:66757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015678.740:66758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015678.755:66759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015678.755:66760): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015678.757:66761): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489688 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015678.789:66762): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015678.789:66763): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015678.804:66764): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015678.804:66765): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015678.806:66766): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489702 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015678.874:66767): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015678.875:66768): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71626F79696D756C6F73706B61796A756D63787976786868796E726371717A65203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015678.876:66769): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015678.879:66770): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015679.044:66771): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015679.045:66772): pid=489717 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015679.049:66773): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015679.049:66774): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015680.072:66775): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015680.072:66776): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015680.074:66777): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489720 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015680.106:66778): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015680.106:66779): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015680.123:66780): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015680.123:66781): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015680.124:66782): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489733 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015680.171:66783): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015680.171:66784): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015680.185:66785): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015680.185:66786): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015680.186:66787): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489746 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015680.219:66788): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015680.219:66789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015680.231:66790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015680.232:66791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015680.233:66792): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489760 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015680.303:66793): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015680.304:66794): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76766A737A77736965747167656F756B6D6D727270667664706467666C69706E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015680.304:66795): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015680.311:66796): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015680.484:66797): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015680.484:66798): pid=489775 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015680.488:66799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015680.489:66800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015681.505:66801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015681.506:66802): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015681.507:66803): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489778 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015681.538:66804): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015681.538:66805): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015681.554:66806): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015681.554:66807): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015681.556:66808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489791 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015681.602:66809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015681.602:66810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015681.614:66811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015681.615:66812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015681.616:66813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489804 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015681.649:66814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015681.650:66815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015681.665:66816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015681.666:66817): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015681.667:66818): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489818 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015681.740:66819): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015681.740:66820): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79716C737177757870737061657075797A6D646C7373646C6F6A63797177616E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015681.741:66821): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015681.745:66822): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015681.931:66823): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015681.932:66824): pid=489833 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015681.936:66825): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015681.936:66826): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015682.953:66827): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015682.954:66828): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015682.956:66829): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489836 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015682.991:66830): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015682.991:66831): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015683.008:66832): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015683.008:66833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015683.009:66834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489849 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015683.049:66835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015683.049:66836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015683.063:66837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015683.063:66838): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015683.065:66839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489862 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015683.100:66840): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015683.100:66841): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015683.115:66842): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015683.115:66843): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015683.117:66844): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489876 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015683.167:66845): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015683.167:66846): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776376716162676D6A626D77647576686A6F7162766E666B6C6F6A6466687975203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015683.168:66847): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015683.170:66848): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015683.298:66849): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015683.298:66850): pid=489891 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015683.302:66851): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015683.302:66852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.324:66853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.324:66854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.325:66855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489894 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.353:66856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.353:66857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.375:66858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.375:66859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.376:66860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489907 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.423:66861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.423:66862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.437:66863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.438:66864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.440:66865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489920 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.474:66866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.474:66867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.489:66868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.489:66869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.491:66870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489934 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015684.554:66871): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015684.554:66872): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E726A7568736D6B6A6D6172686E6B6975776469646D70697375617765706B66203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015684.555:66873): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015684.558:66874): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015684.700:66875): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015684.701:66876): pid=489949 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015684.705:66877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.705:66878): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.724:66879): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.724:66880): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.726:66881): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489952 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.761:66882): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.761:66883): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.777:66884): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.777:66885): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.779:66886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489965 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.835:66887): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.835:66888): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.857:66889): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.857:66890): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.858:66891): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489978 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015684.893:66892): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015684.893:66893): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015684.912:66894): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015684.912:66895): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015684.914:66896): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=489992 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015684.981:66897): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015684.981:66898): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73736272626E77687671696E787268727267796F7A6D6E7A7969656A66736764203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353634392E393233303234342D36313330342D3235343634373833303336383432342F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015684.982:66899): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015684.996:66900): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015684.998:66901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015685.182:66902): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015685.182:66903): pid=490007 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015685.187:66904): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.187:66905): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015685.203:66906): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.203:66907): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.204:66908): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490032 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015685.233:66909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.233:66910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015685.303:66911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.303:66912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.304:66913): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490051 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015685.334:66914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.334:66915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015685.354:66916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.354:66917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.355:66918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490064 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015685.389:66919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.389:66920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015685.401:66921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015685.410:66922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.410:66923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.411:66924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490084 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015685.456:66925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.457:66926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015685.474:66927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.474:66928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.475:66929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490097 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015685.506:66930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015685.506:66931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015685.522:66932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015685.522:66933): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015685.525:66934): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490111 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015685.584:66935): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015685.585:66936): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717667786A67697A6D7678746B68686571737062716E6D736362646B6F657273203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353638352E333432343630322D36313434372D3231303131383635393837383137382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015685.585:66937): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015685.590:66938): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015685.906:66939): prog-id=2498 op=LOAD
type=SYSCALL msg=audit(1765015685.906:66939): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd38565120 a2=90 a3=9500000000 items=0 ppid=490143 pid=490144 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015685.906:66939): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336566373534393966306338613038626230333039633766663161316234
type=BPF msg=audit(1765015686.467:66940): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015686.594:66941): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015686.594:66942): pid=490126 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015686.599:66943): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.599:66944): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.612:66945): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.612:66946): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.615:66947): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490181 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.648:66948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.648:66949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.718:66950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.718:66951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.720:66952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490195 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.752:66953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.752:66954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.766:66955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.766:66956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.767:66957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490208 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.800:66958): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.800:66959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.823:66960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.823:66961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.824:66962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490227 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.871:66963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.871:66964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.888:66965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.889:66966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.890:66967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490240 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.946:66968): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.946:66969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015686.966:66970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015686.967:66971): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015686.968:66972): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490253 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015686.999:66973): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015686.999:66974): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015687.015:66975): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015687.015:66976): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015687.016:66977): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490267 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015687.083:66978): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015687.083:66979): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015687.084:66980): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015687.089:66981): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015687.278:66982): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015687.279:66983): pid=490282 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015687.284:66984): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015687.284:66985): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015687.537:66986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015687.585:66987): prog-id=2499 op=LOAD
type=SYSCALL msg=audit(1765015687.585:66987): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffa8c4b4b0 a2=90 a3=9500000000 items=0 ppid=490314 pid=490315 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015687.585:66987): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316166333038646562306564393064633937383739376364373739336532
type=BPF msg=audit(1765015688.082:66988): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015688.306:66989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.306:66990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.308:66991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490358 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.345:66992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.345:66993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.357:66994): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.357:66995): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.359:66996): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490371 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.388:66997): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.388:66998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.405:66999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.405:67000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.406:67001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490384 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.447:67002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.447:67003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.470:67004): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.470:67005): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.471:67006): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490403 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.521:67007): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.521:67008): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.544:67009): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.544:67010): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.546:67011): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490416 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.580:67012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.580:67013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.597:67014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.597:67015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.599:67016): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490430 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015688.661:67017): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015688.661:67018): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7274756D6C766D78787762766A65676E756C617963786D65786B71676D66756E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353638382E333937323138372D36313435362D39393236313436373139353635312F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015688.662:67019): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015688.666:67020): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015688.812:67021): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015688.813:67022): pid=490445 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015688.818:67023): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.818:67024): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.840:67025): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.840:67026): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.841:67027): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490448 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.875:67028): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.875:67029): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.901:67030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.901:67031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.903:67032): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490461 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015688.956:67033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015688.956:67034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015688.972:67035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015688.972:67036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015688.974:67037): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490474 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.008:67038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.008:67039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.027:67040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.027:67041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.029:67042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490488 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015689.101:67043): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015689.102:67044): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D686475776C736F7274716E6B6D6170656F6E73636D626A74786774756A6F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353638382E333937323138372D36313435362D39393236313436373139353635312F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015689.103:67045): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015689.118:67046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015689.122:67047): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015689.295:67048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015689.308:67049): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015689.308:67050): pid=490503 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015689.311:67051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.311:67052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.336:67053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.337:67054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.338:67055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490531 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.370:67056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.370:67057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.475:67058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.475:67059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.477:67060): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490545 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.510:67061): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.510:67062): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.522:67063): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.522:67064): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.524:67065): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490558 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.567:67066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.567:67067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.588:67068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.588:67069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.590:67070): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490577 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.638:67071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.638:67072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.653:67073): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.654:67074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.655:67075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490590 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015689.688:67076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015689.688:67077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015689.702:67078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015689.702:67079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.704:67080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490604 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015689.774:67081): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015689.774:67082): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015689.775:67083): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015689.779:67084): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015690.143:67085): prog-id=2500 op=LOAD
type=SYSCALL msg=audit(1765015690.143:67085): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9aec2fa0 a2=90 a3=9500000000 items=0 ppid=490636 pid=490637 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015690.143:67085): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393235353264313763663234616362656636636339353465323533333265
type=BPF msg=audit(1765015690.705:67086): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015690.854:67087): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015690.855:67088): pid=490619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015690.861:67089): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015690.861:67090): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015690.876:67091): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015690.876:67092): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.879:67093): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490674 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015690.914:67094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015690.914:67095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015691.060:67096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015691.060:67097): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.062:67098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490688 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015691.095:67099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015691.095:67100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015691.110:67101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015691.111:67102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.112:67103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490701 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015691.150:67104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015691.151:67105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015691.177:67106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015691.177:67107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.178:67108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490720 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015691.229:67109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015691.229:67110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015691.242:67111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015691.242:67112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.244:67113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490733 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015691.279:67114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015691.279:67115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015691.293:67116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015691.293:67117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.295:67118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490747 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015691.365:67119): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015691.366:67120): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727578646773716471627779646276707378617468797772786B6F7776647463203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353639312E3130323333382D36313439322D3236393237363439323336383437392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015691.367:67121): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015691.371:67122): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015691.681:67123): prog-id=2501 op=LOAD
type=SYSCALL msg=audit(1765015691.681:67123): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2c6fbbf0 a2=90 a3=9500000000 items=0 ppid=490780 pid=490781 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015691.681:67123): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363864636537373436656661613731323066643365363431346462646436
type=BPF msg=audit(1765015692.117:67124): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015692.241:67125): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015692.241:67126): pid=490762 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015692.246:67127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.246:67128): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.268:67129): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.269:67130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.270:67131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490820 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015692.304:67132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.304:67133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.686:67134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.686:67135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.687:67136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490834 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015692.721:67137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.721:67138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.733:67139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.733:67140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.735:67141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490847 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015692.778:67142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.778:67143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.796:67144): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.796:67145): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.798:67146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490866 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015692.844:67147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.844:67148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.857:67149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.857:67150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.858:67151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490879 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015692.892:67152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015692.892:67153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015692.905:67154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015692.905:67155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.907:67156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490893 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015692.973:67157): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015692.973:67158): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A736B7579776677727A6E7274777776616676706461796471727A696F666D76203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353639322E3732383331382D36313530392D3139333537353833363739373139312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015692.974:67159): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015692.979:67160): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015693.307:67161): prog-id=2502 op=LOAD
type=SYSCALL msg=audit(1765015693.307:67161): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffc7c99e90 a2=90 a3=9500000000 items=0 ppid=490926 pid=490927 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015693.307:67161): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333230663938333031333133393861663561663663353561653339663234
type=BPF msg=audit(1765015693.837:67162): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015693.959:67163): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015693.960:67164): pid=490908 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015693.965:67165): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015693.965:67166): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015693.979:67167): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015693.979:67168): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.980:67169): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490965 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015694.014:67170): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015694.015:67171): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015697.309:67172): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015697.309:67173): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015697.311:67174): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490979 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015697.341:67175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015697.341:67176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015697.355:67177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015697.355:67178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015697.357:67179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=490992 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015697.392:67180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015697.392:67181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015697.412:67182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015697.412:67183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015697.414:67184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491011 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015697.457:67185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015697.458:67186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015697.472:67187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015697.472:67188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015697.473:67189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491024 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015697.506:67190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015697.506:67191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015697.521:67192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015697.521:67193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015697.524:67194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491038 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015697.587:67195): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015697.587:67196): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D767675706A7A7967696F786C726674626A766E6474716C626E626578706177203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353639372E333438383933322D36313536352D3135303730393732373834343238352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015697.588:67197): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015697.593:67198): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015697.935:67199): prog-id=2503 op=LOAD
type=SYSCALL msg=audit(1765015697.935:67199): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc67643380 a2=90 a3=9500000000 items=0 ppid=491070 pid=491071 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015697.935:67199): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306635333937663730363334363666323762666362393533313235313336
type=BPF msg=audit(1765015698.446:67200): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015698.573:67201): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015698.573:67202): pid=491053 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015698.578:67203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015698.578:67204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015698.592:67205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015698.592:67206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015698.594:67207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491110 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015698.626:67208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015698.626:67209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015698.916:67210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015698.916:67211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015698.918:67212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491124 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015698.950:67213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015698.950:67214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015698.965:67215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015698.965:67216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015698.966:67217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491137 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015699.005:67218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015699.006:67219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015699.029:67220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015699.029:67221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015699.031:67222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491156 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015699.078:67223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015699.078:67224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015699.094:67225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015699.095:67226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015699.096:67227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491169 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015699.562:67228): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015699.562:67229): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015699.577:67230): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015699.577:67231): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015699.580:67232): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491183 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015699.640:67233): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015699.641:67234): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C6372736D7764736767616567737271786561766B666A72636F6772627966203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353639382E3935373438382D36313538342D38333536303233393337393234382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015699.641:67235): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015699.645:67236): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015699.993:67237): prog-id=2504 op=LOAD
type=SYSCALL msg=audit(1765015699.993:67237): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff314cc8e0 a2=90 a3=9500000000 items=0 ppid=491215 pid=491216 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015699.993:67237): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386434323539373065623133626635353833656337363330326338616561
type=BPF msg=audit(1765015700.503:67238): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015700.628:67239): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015700.629:67240): pid=491198 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015700.633:67241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015700.633:67242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015700.646:67243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015700.646:67244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015700.647:67245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491254 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015700.682:67246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015700.682:67247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015700.719:67248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015700.723:67249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015700.727:67250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015700.939:67251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015700.995:67252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015701.073:67253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015701.115:67254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015701.324:67255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015705.715:67256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015705.719:67257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015705.919:67258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015706.008:67259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015710.786:67260): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015710.786:67261): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015710.789:67262): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491439 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015710.820:67263): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015710.820:67264): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015710.834:67265): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015710.834:67266): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015710.835:67267): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491452 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015710.872:67268): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015710.872:67269): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015710.894:67270): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015710.894:67271): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015710.895:67272): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491471 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015710.938:67273): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015710.938:67274): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015710.956:67275): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015710.956:67276): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015710.957:67277): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491484 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015711.000:67278): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015711.000:67279): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015711.012:67280): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015711.012:67281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015711.014:67282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491497 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015711.047:67283): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015711.047:67284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015711.065:67285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015711.065:67286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015711.067:67287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491511 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015711.137:67288): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015711.138:67289): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015711.141:67290): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015711.150:67291): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015711.331:67292): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015711.331:67293): pid=491526 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015711.336:67294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015711.336:67295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015711.650:67296): prog-id=2505 op=LOAD
type=SYSCALL msg=audit(1765015711.650:67296): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6bd0fad0 a2=90 a3=9500000000 items=0 ppid=491548 pid=491549 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015711.650:67296): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306665373838363136343264383835326161393735363635333265393135
type=BPF msg=audit(1765015712.113:67297): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015712.360:67298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.361:67299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.363:67300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491587 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.395:67301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.395:67302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.418:67303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.418:67304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.419:67305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491600 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.447:67306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.448:67307): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.471:67308): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.472:67309): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.473:67310): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491613 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.510:67311): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.510:67312): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.531:67313): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.531:67314): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.532:67315): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491632 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.577:67316): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.577:67317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.597:67318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.597:67319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.599:67320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491645 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.629:67321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.630:67322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.646:67323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.647:67324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.650:67325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491659 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015712.709:67326): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015712.709:67327): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74776D6A6E6278767A73676D77746776777370656A6A666E727464636173746E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353731322E343536393632362D36313539372D3232323033363334333135373139322F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015712.710:67328): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015712.714:67329): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015712.889:67330): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015712.889:67331): pid=491674 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015712.893:67332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.893:67333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.911:67334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.911:67335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.912:67336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491677 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.936:67337): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.936:67338): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015712.951:67339): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015712.951:67340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015712.952:67341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491690 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015712.988:67342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015712.989:67343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.003:67344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.003:67345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.004:67346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491703 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.029:67347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.029:67348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.043:67349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.044:67350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.045:67351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491717 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015713.102:67352): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015713.102:67353): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63796861626B726F6D69636564637571746B6C63697467746E6C646563636B6E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353731322E343536393632362D36313539372D3232323033363334333135373139322F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015713.102:67354): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015713.104:67355): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015713.242:67356): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015713.243:67357): pid=491732 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015713.246:67358): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.246:67359): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.260:67360): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.260:67361): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.262:67362): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491735 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.284:67363): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.284:67364): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.563:67365): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.563:67366): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.566:67367): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491749 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.594:67368): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.594:67369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.607:67370): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.607:67371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.609:67372): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491762 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.642:67373): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.642:67374): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.666:67375): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.667:67376): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.668:67377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491781 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.716:67378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.716:67379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.733:67380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.733:67381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.736:67382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491794 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015713.766:67383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015713.766:67384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015713.780:67385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015713.780:67386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015713.781:67387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491808 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015713.844:67388): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015713.845:67389): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C7470767976786A6F67737872757166746471686B756D76686874686E766D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353731332E363032383837362D36313633302D3134303337373234353431353531322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015713.845:67390): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015713.848:67391): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015714.169:67392): prog-id=2506 op=LOAD
type=SYSCALL msg=audit(1765015714.169:67392): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef74dee50 a2=90 a3=9500000000 items=0 ppid=491840 pid=491841 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015714.169:67392): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356263336338666137623938343631373934633865373330616232366331
type=BPF msg=audit(1765015714.770:67393): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015714.860:67394): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015714.860:67395): pid=491823 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015714.864:67396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015714.864:67397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015714.879:67398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015714.879:67399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015714.881:67400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491879 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015714.909:67401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015714.909:67402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015715.711:67403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015716.111:67404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015719.708:67405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015719.871:67406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015721.923:67407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015721.923:67408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015721.926:67409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491982 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015721.959:67410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015721.959:67411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015721.975:67412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015721.975:67413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015721.976:67414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=491995 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015722.012:67415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015722.012:67416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015722.031:67417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015722.031:67418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015722.033:67419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492014 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015722.076:67420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015722.076:67421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015722.091:67422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015722.092:67423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015722.093:67424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492027 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015722.122:67425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015722.123:67426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015722.139:67427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015722.139:67428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015722.142:67429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492041 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015722.209:67430): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015722.209:67431): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F7468686F6D687171726D6B6F7579737A74656B74616B766A616E666C736F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353732312E393637343936392D36313635362D3133313837393631363338393832382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015722.210:67432): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015722.215:67433): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015722.535:67434): prog-id=2507 op=LOAD
type=SYSCALL msg=audit(1765015722.535:67434): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd44fbba40 a2=90 a3=9500000000 items=0 ppid=492073 pid=492074 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015722.535:67434): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353630353835613330333031343434653163366162383931633966666134
type=BPF msg=audit(1765015722.968:67435): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015723.091:67436): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015723.091:67437): pid=492056 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015723.095:67438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.095:67439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.108:67440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.108:67441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.109:67442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492112 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015723.137:67443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.137:67444): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.163:67445): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.163:67446): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.165:67447): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492126 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015723.191:67448): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.191:67449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.204:67450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.204:67451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.206:67452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492139 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015723.239:67453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.239:67454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.257:67455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.257:67456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.259:67457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492158 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015723.302:67458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.302:67459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.317:67460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.317:67461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.318:67462): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492171 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015723.346:67463): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015723.346:67464): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015723.362:67465): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015723.362:67466): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.364:67467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492185 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015723.425:67468): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015723.426:67469): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D6A6B6C696A61617865677062667562677A70796F76736E71757079757861203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353732332E313938303633392D36313635362D3132353636353430383433343330362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015723.427:67470): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015723.432:67471): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015723.744:67472): prog-id=2508 op=LOAD
type=SYSCALL msg=audit(1765015723.744:67472): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd71dfa3c0 a2=90 a3=9500000000 items=0 ppid=492217 pid=492218 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015723.744:67472): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316662306366323563626232663363633562333735633331303831306438
type=BPF msg=audit(1765015724.193:67473): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015724.281:67474): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015724.281:67475): pid=492200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015724.285:67476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.285:67477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.307:67478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.307:67479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.308:67480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492257 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015724.328:67481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.328:67482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.366:67483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.366:67484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.367:67485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492271 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015724.392:67486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.392:67487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.413:67488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.413:67489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.414:67490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492284 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015724.456:67491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.456:67492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.479:67493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.479:67494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.481:67495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492303 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015724.528:67496): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.528:67497): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.543:67498): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.543:67499): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.544:67500): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492316 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015724.576:67501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015724.576:67502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015724.592:67503): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015724.593:67504): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.594:67505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492330 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015724.658:67506): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015724.659:67507): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726372786B7A69786F6C637A6F776D656676757A70677A6879696F7A786766203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353732342E333939393033332D36313635362D34353032313532303132333534322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015724.660:67508): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015724.664:67509): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015724.941:67510): prog-id=2509 op=LOAD
type=SYSCALL msg=audit(1765015724.941:67510): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdbd6e1810 a2=90 a3=9500000000 items=0 ppid=492362 pid=492363 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015724.941:67510): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663833323333373231323766636235663266363631323866663931373734
type=BPF msg=audit(1765015725.384:67511): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015725.470:67512): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015725.471:67513): pid=492345 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015725.475:67514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015725.476:67515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015725.489:67516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015725.489:67517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015725.491:67518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492401 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015725.545:67519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015725.545:67520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015731.712:67521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015731.715:67522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015731.719:67523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015731.723:67524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015732.062:67525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015732.079:67526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015732.105:67527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015732.142:67528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015736.716:67529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015736.719:67530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015736.870:67531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015736.952:67532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015737.152:67533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015737.152:67534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015737.155:67535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492580 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015737.191:67536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015737.191:67537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015737.202:67538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015737.202:67539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015737.204:67540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492593 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015737.243:67541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015737.243:67542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015737.262:67543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015737.262:67544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015737.263:67545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492612 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015737.308:67546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015737.308:67547): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015737.321:67548): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015737.321:67549): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015737.322:67550): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492625 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015737.356:67551): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015737.356:67552): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015737.374:67553): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015737.374:67554): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015737.376:67555): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492639 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015737.446:67556): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015737.446:67557): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F657A6577786F6F6B6A75657670767575756163726A68666C666E64616576203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353733372E313939333230332D36313639352D323133363539303837343730332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015737.449:67558): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015737.455:67559): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015737.782:67560): prog-id=2510 op=LOAD
type=SYSCALL msg=audit(1765015737.782:67560): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea29d5710 a2=90 a3=9500000000 items=0 ppid=492671 pid=492672 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015737.782:67560): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356363343732346530393930313061393334316636396364343637383461
type=BPF msg=audit(1765015738.281:67561): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015738.413:67562): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015738.413:67563): pid=492654 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015738.418:67564): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.418:67565): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.431:67566): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.431:67567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.433:67568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492711 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015738.466:67569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.466:67570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.544:67571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.544:67572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.545:67573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492725 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015738.574:67574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.574:67575): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.587:67576): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.588:67577): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.589:67578): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492738 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015738.622:67579): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.622:67580): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.644:67581): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.644:67582): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.645:67583): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492757 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015738.690:67584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.690:67585): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.708:67586): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.708:67587): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.710:67588): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015738.744:67589): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015738.744:67590): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015738.762:67591): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015738.762:67592): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015738.764:67593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492784 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015738.833:67594): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015738.833:67595): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67716C65776266646A686371717A74676777626F65647667786869716675636A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353733382E353832343331332D36313730342D3134333439333038393734333831342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015738.834:67596): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015738.839:67597): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015739.158:67598): prog-id=2511 op=LOAD
type=SYSCALL msg=audit(1765015739.158:67598): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdc98e1640 a2=90 a3=9500000000 items=0 ppid=492816 pid=492817 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015739.158:67598): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616566363231333839363331613332343931386564353736353132623236
type=BPF msg=audit(1765015739.609:67599): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015739.733:67600): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015739.733:67601): pid=492799 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015739.737:67602): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015739.737:67603): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015739.759:67604): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015739.759:67605): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015739.760:67606): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492855 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015739.793:67607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015739.793:67608): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015746.546:67609): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.546:67610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.549:67611): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492869 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015746.579:67612): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.579:67613): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015746.595:67614): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.595:67615): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.597:67616): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492882 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015746.631:67617): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.631:67618): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015746.651:67619): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.652:67620): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.653:67621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492901 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015746.697:67622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.697:67623): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015746.712:67624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015746.717:67625): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.718:67626): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.719:67627): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492915 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015746.752:67628): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.753:67629): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015746.769:67630): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.769:67631): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.771:67632): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=492940 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015746.846:67633): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015746.846:67634): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015746.847:67635): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015746.858:67636): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015747.077:67637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015747.191:67638): prog-id=2512 op=LOAD
type=SYSCALL msg=audit(1765015747.191:67638): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef40793f0 a2=90 a3=9500000000 items=0 ppid=492989 pid=492990 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015747.191:67638): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346332323262646337323565323261663564653335386139626231386533
type=BPF msg=audit(1765015747.616:67639): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015747.721:67640): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015747.721:67641): pid=492955 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015747.726:67642): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015747.726:67643): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015747.743:67644): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015747.743:67645): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.744:67646): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493029 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015747.773:67647): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015747.773:67648): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015747.864:67649): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015747.864:67650): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.866:67651): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493043 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015747.895:67652): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015747.895:67653): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015747.911:67654): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015747.911:67655): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.912:67656): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493056 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015747.951:67657): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015747.951:67658): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015747.981:67659): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015747.981:67660): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.983:67661): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493075 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015748.028:67662): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015748.028:67663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015748.054:67664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015748.054:67665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015748.056:67666): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493088 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015748.087:67667): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015748.087:67668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015748.104:67669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015748.104:67670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015748.106:67671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493102 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015748.172:67672): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015748.172:67673): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6B7468666376646A626C716E7468626A6C736F6F726564736B6B66696262203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353734372E393034313539332D36313739342D3134353838393430363433363130322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015748.173:67674): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015748.177:67675): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015748.495:67676): prog-id=2513 op=LOAD
type=SYSCALL msg=audit(1765015748.495:67676): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff98a02c10 a2=90 a3=9500000000 items=0 ppid=493134 pid=493135 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015748.495:67676): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306233623637323063303835366265636262616265663963326261616466
type=SERVICE_START msg=audit(1765015750.712:67677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015750.923:67678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015751.966:67679): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015752.108:67680): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015752.109:67681): pid=493117 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015752.115:67682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.115:67683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.136:67684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.136:67685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.138:67686): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493199 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015752.173:67687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.173:67688): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.264:67689): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.264:67690): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.265:67691): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493213 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015752.295:67692): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.295:67693): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.309:67694): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.309:67695): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.310:67696): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493226 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015752.351:67697): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.351:67698): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.371:67699): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.371:67700): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.373:67701): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493245 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015752.425:67702): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.425:67703): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.441:67704): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.441:67705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.442:67706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493258 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015752.471:67707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015752.471:67708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015752.487:67709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015752.487:67710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015752.489:67711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493272 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015752.551:67712): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015752.551:67713): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C696E7470707877757670696F6B7473726668737472616C707A696F656D6579203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353735322E333033333837392D36313830332D3237353430303532393031383335362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015752.552:67714): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015752.558:67715): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015752.852:67716): prog-id=2514 op=LOAD
type=SYSCALL msg=audit(1765015752.852:67716): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde4d50c30 a2=90 a3=9500000000 items=0 ppid=493304 pid=493305 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015752.852:67716): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306538636463323965663038623561303532353137373565353737613537
type=BPF msg=audit(1765015754.904:67717): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015755.049:67718): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015755.049:67719): pid=493287 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015755.055:67720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015755.056:67721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015755.077:67722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015755.077:67723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015755.080:67724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493343 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015755.116:67725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015755.116:67726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015762.713:67727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015762.717:67728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015762.720:67729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015762.725:67730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015762.965:67731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015763.033:67732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015763.090:67733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015763.115:67734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015765.281:67735): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015765.281:67736): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.283:67737): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493475 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015765.318:67738): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015765.319:67739): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015765.334:67740): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015765.334:67741): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.336:67742): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493489 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015765.377:67743): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015765.377:67744): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015765.399:67745): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015765.399:67746): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.401:67747): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493508 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015765.458:67748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015765.459:67749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015765.476:67750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015765.476:67751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.479:67752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493521 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015765.522:67753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015765.523:67754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015765.547:67755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015765.547:67756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.549:67757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493535 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015765.622:67758): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015765.623:67759): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E686B61636967767879736C6F65796C787366646F75787178676C657964667A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353736352E3332363538322D36313831372D35343233323439333831363630392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015765.624:67760): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015765.630:67761): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015765.956:67762): prog-id=2515 op=LOAD
type=SYSCALL msg=audit(1765015765.956:67762): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff44477940 a2=90 a3=9500000000 items=0 ppid=493567 pid=493568 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015765.956:67762): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363130373830353737633030303130393561303462666566333065346466
type=SERVICE_START msg=audit(1765015767.716:67763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015767.721:67764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015767.952:67765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015767.980:67766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015769.049:67767): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015769.195:67768): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015769.196:67769): pid=493550 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015769.202:67770): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015769.202:67771): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015769.220:67772): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015769.220:67773): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015769.222:67774): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493658 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015769.257:67775): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015769.257:67776): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015777.714:67777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015778.110:67778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015779.354:67779): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015779.354:67780): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.356:67781): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493736 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015779.384:67782): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015779.384:67783): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015779.397:67784): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015779.397:67785): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.398:67786): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493749 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015779.432:67787): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015779.432:67788): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015779.451:67789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015779.451:67790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.452:67791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493768 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015779.492:67792): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015779.492:67793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015779.507:67794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015779.507:67795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.508:67796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493781 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015779.530:67797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015779.530:67798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015779.546:67799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015779.546:67800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.548:67801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493795 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015779.603:67802): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015779.603:67803): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C79797A646A7169616D69686572696E6F697175777661796C617464757A7A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353737392E333932333332382D36313832392D37303535343435393339313236352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015779.606:67804): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015779.612:67805): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015779.895:67806): prog-id=2516 op=LOAD
type=SYSCALL msg=audit(1765015779.895:67806): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffad482220 a2=90 a3=9500000000 items=0 ppid=493828 pid=493829 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015779.895:67806): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373066396166323134366366383837353736343139313636636137316565
type=BPF msg=audit(1765015780.386:67807): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015780.504:67808): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015780.505:67809): pid=493810 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015780.510:67810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.510:67811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.522:67812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.522:67813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.524:67814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493868 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015780.553:67815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.553:67816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.636:67817): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.636:67818): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.638:67819): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493882 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015780.666:67820): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.666:67821): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.682:67822): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.682:67823): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.683:67824): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493895 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015780.719:67825): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.719:67826): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.741:67827): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.741:67828): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.743:67829): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493914 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015780.784:67830): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.784:67831): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.799:67832): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.799:67833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.800:67834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493927 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015780.830:67835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015780.830:67836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015780.846:67837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015780.846:67838): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.848:67839): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=493941 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015780.911:67840): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015780.912:67841): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7369736C627863626D6F666271697562796575676B716C6B617477797A726A77203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353738302E363734323236352D36313833382D3132363633323636313934373437312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015780.913:67842): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015780.917:67843): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015781.225:67844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015781.254:67845): prog-id=2517 op=LOAD
type=SYSCALL msg=audit(1765015781.254:67845): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef0acd800 a2=90 a3=9500000000 items=0 ppid=493978 pid=493980 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015781.254:67845): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633063363061623035656335633563653439616430613563343438353933
type=SERVICE_STOP msg=audit(1765015781.423:67846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015782.697:67847): pid=494013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015782.805:67848): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=494013 suid=74 rport=53544 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015782.805:67849): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=494013 suid=74 rport=53544 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015783.442:67850): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494013 suid=74 rport=53544 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015783.442:67851): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494013 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015783.443:67852): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015783.444:67853): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015783.444:67854): pid=494012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765015784.913:67855): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015785.031:67856): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015785.032:67857): pid=493956 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015785.036:67858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.036:67859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.052:67860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.052:67861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.054:67862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494039 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015785.081:67863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.082:67864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.286:67865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.286:67866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.288:67867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494053 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015785.320:67868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.320:67869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.344:67870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.344:67871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.345:67872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494066 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015785.381:67873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.382:67874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.415:67875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.415:67876): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.417:67877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494085 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015785.471:67878): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.471:67879): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.496:67880): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.496:67881): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.497:67882): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494098 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015785.532:67883): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015785.532:67884): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015785.552:67885): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015785.552:67886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015785.553:67887): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494112 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015785.621:67888): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015785.622:67889): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75727A7879727572616863676D796865717A7A6F68676C6F62637472776C7363203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353738352E3332383930352D36313835332D38363636373035313037363433332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015785.623:67890): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015785.629:67891): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015785.930:67892): prog-id=2518 op=LOAD
type=SYSCALL msg=audit(1765015785.930:67892): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe62ebde0 a2=90 a3=9500000000 items=0 ppid=494145 pid=494146 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015785.930:67892): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333761636633383037663764336165636530353132363765363331353834
type=BPF msg=audit(1765015789.483:67893): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015789.614:67894): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015789.615:67895): pid=494127 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015789.619:67896): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015789.619:67897): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015789.640:67898): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015789.640:67899): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.641:67900): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494317 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015789.668:67901): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015789.668:67902): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015793.724:67903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015793.728:67904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015793.733:67905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015793.738:67906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015793.956:67907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015794.051:67908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015794.092:67909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015794.200:67910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015798.712:67911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015798.716:67912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015798.870:67913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015799.064:67914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015799.789:67915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015799.789:67916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.792:67917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494532 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015799.825:67918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015799.825:67919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015799.840:67920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015799.840:67921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.842:67922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494545 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015799.878:67923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015799.878:67924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015799.898:67925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015799.898:67926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.900:67927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494564 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015799.945:67928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015799.945:67929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015799.962:67930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015799.962:67931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.963:67932): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494577 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015800.008:67933): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015800.008:67934): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015800.025:67935): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015800.025:67936): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015800.026:67937): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494590 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015800.059:67938): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015800.059:67939): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015800.075:67940): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015800.075:67941): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015800.077:67942): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494604 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015800.138:67943): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015800.139:67944): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015800.140:67945): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015800.146:67946): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015800.305:67947): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015800.306:67948): pid=494619 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015800.310:67949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015800.310:67950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015800.684:67951): prog-id=2519 op=LOAD
type=SYSCALL msg=audit(1765015800.684:67951): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe21e1e070 a2=90 a3=9500000000 items=0 ppid=494642 pid=494643 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015800.684:67951): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346562623461346461646463363863623632393131636666383563353634
type=USER_LOGIN msg=audit(1765015801.336:67952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.336:67953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.339:67954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494666 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015801.376:67955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.376:67956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015801.391:67957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.391:67958): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.392:67959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494679 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015801.426:67960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.426:67961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015801.441:67962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.441:67963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.444:67964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494692 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015801.487:67965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.487:67966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015801.506:67967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.506:67968): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.508:67969): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494711 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015801.553:67970): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.553:67971): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015801.571:67972): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.571:67973): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.573:67974): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494724 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015801.608:67975): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.608:67976): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015801.634:67977): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015801.634:67978): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.636:67979): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494738 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015801.688:67980): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015801.688:67981): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B687667756B6C706D797A76687273696175736A676C77776C66646E616C6D6F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015801.690:67982): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015801.695:67983): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015801.909:67984): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015801.909:67985): pid=494753 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015801.913:67986): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015801.913:67987): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015802.932:67988): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015802.932:67989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015802.934:67990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015802.966:67991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015802.966:67992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015802.986:67993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015802.986:67994): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015802.987:67995): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494769 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015803.033:67996): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015803.033:67997): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015803.047:67998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015803.047:67999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015803.049:68000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494782 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015803.081:68001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015803.081:68002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015803.096:68003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015803.096:68004): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015803.098:68005): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494796 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015803.168:68006): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015803.169:68007): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A636B6172617967747268716A6F75717169766A796E7A736974777463616770203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015803.170:68008): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015803.173:68009): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015803.340:68010): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015803.340:68011): pid=494811 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015803.344:68012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015803.344:68013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015804.364:68014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015804.364:68015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015804.365:68016): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494814 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015804.396:68017): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015804.396:68018): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015804.416:68019): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015804.416:68020): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015804.418:68021): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494827 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015804.463:68022): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015804.463:68023): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015804.476:68024): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015804.477:68025): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015804.478:68026): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494840 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015804.511:68027): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015804.511:68028): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015804.524:68029): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015804.525:68030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015804.526:68031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494854 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015804.593:68032): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015804.593:68033): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6169756A6A697477727471666474666F777A736A6E666B656F7074776E707677203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015804.594:68034): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015804.596:68035): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015804.772:68036): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015804.772:68037): pid=494869 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015804.777:68038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015804.777:68039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015805.346:68040): pid=494872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015805.701:68041): pid=494873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015805.796:68042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015805.796:68043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015805.798:68044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494874 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015805.833:68045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015805.833:68046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015805.856:68047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015805.856:68048): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015805.858:68049): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494887 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015805.915:68050): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015805.915:68051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015805.932:68052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015805.932:68053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015805.934:68054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494900 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015805.968:68055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015805.968:68056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015805.986:68057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015805.986:68058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015805.988:68059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494914 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015806.057:68060): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015806.057:68061): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F737676686C656B78617869686F6268686B6C797274647775736265617A76203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015806.059:68062): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015806.063:68063): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015806.239:68064): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015806.239:68065): pid=494929 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015806.243:68066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015806.244:68067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015807.263:68068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015807.263:68069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015807.264:68070): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494932 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015807.294:68071): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015807.294:68072): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015807.313:68073): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015807.313:68074): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015807.314:68075): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494945 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015807.358:68076): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015807.358:68077): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015807.373:68078): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015807.374:68079): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015807.375:68080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494958 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015807.407:68081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015807.408:68082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015807.423:68083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015807.424:68084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015807.425:68085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494972 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015807.488:68086): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015807.489:68087): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A6B6D6A7963767563796771636E6172686D756B6A746F6A746E656171646B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015807.489:68088): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015807.492:68089): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015807.678:68090): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015807.679:68091): pid=494987 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015807.683:68092): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015807.683:68093): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015808.703:68094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015808.703:68095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015808.704:68096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=494990 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015808.713:68097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015808.735:68098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015808.735:68099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015808.754:68100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015808.754:68101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015808.755:68102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495012 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015808.800:68103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015808.800:68104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015808.812:68105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015808.813:68106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015808.814:68107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495028 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015808.849:68108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015808.849:68109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015808.862:68110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015808.862:68111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015808.864:68112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495051 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015808.930:68113): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015808.931:68114): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78646D61736E71797570686A666D6765756E7272656C7570727776617A6E7463203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015808.932:68115): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015808.935:68116): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015809.099:68117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015809.117:68118): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015809.117:68119): pid=495066 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015809.121:68120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015809.121:68121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015810.139:68122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015810.139:68123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015810.140:68124): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495075 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015810.169:68125): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015810.169:68126): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015810.195:68127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015810.195:68128): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015810.197:68129): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495088 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015810.240:68130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015810.240:68131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015810.258:68132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015810.258:68133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015810.259:68134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495101 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015810.290:68135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015810.290:68136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015810.305:68137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015810.305:68138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015810.307:68139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495115 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015810.369:68140): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015810.370:68141): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6261746F736A6A6C6F7561766873697862657268616F77717A71747968666574203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015810.370:68142): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015810.373:68143): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015810.533:68144): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015810.533:68145): pid=495130 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015810.538:68146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015810.538:68147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015811.079:68148): pid=495134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015811.350:68149): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=495134 suid=74 rport=56300 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015811.350:68150): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=495134 suid=74 rport=56300 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765015811.553:68151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015811.553:68152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015811.555:68153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495135 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015811.586:68154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015811.586:68155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015811.603:68156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015811.603:68157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015811.605:68158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495148 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015811.649:68159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015811.650:68160): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015811.665:68161): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015811.665:68162): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015811.667:68163): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495161 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015811.701:68164): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015811.701:68165): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015811.714:68166): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015811.715:68167): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015811.717:68168): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495175 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015811.718:68169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015811.784:68170): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015811.785:68171): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E7A6A706B77677561677A7A63726474796264677562686B64756D64626E6C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015811.785:68172): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015811.788:68173): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015811.874:68174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015811.961:68175): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015811.962:68176): pid=495200 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015811.966:68177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015811.966:68178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015812.984:68179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015812.984:68180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015812.985:68181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495218 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015813.021:68182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015813.022:68183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015813.040:68184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015813.040:68185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015813.042:68186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495231 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015813.086:68187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015813.086:68188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015813.104:68189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015813.104:68190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015813.105:68191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495244 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015813.119:68192): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=495134 suid=74 rport=56300 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015813.120:68193): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495134 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015813.121:68194): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.88.225.195 addr=222.88.225.195 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015813.122:68195): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015813.122:68196): pid=495133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.88.225.195 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765015813.141:68197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015813.141:68198): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015813.159:68199): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015813.159:68200): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015813.161:68201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495258 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015813.227:68202): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015813.227:68203): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626977757A6D79626E74737871656B656E686C796E74756F7465626963657275203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015813.228:68204): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015813.233:68205): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015813.450:68206): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015813.450:68207): pid=495273 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015813.454:68208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015813.454:68209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015814.474:68210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015814.475:68211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015814.478:68212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495276 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015814.509:68213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015814.509:68214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015814.528:68215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015814.528:68216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015814.529:68217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495289 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015814.573:68218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015814.573:68219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015814.585:68220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015814.585:68221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015814.587:68222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495302 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015814.622:68223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015814.622:68224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015814.638:68225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015814.638:68226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015814.640:68227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495316 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015814.706:68228): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015814.707:68229): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71666669726670756B6664726D7278637667666F62676C78746E6F6970706B7A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015814.707:68230): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015814.710:68231): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015814.866:68232): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015814.867:68233): pid=495331 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015814.870:68234): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015814.870:68235): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015815.886:68236): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015815.886:68237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015815.888:68238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495334 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015815.917:68239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015815.917:68240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015815.936:68241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015815.936:68242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015815.937:68243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495347 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015815.983:68244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015815.984:68245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015815.998:68246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015815.998:68247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015816.000:68248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495360 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015816.031:68249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015816.031:68250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015816.047:68251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015816.047:68252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015816.084:68253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495374 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015816.146:68254): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015816.146:68255): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A62736A6364686166676476616961667667777566676366657A646667737777203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015816.146:68256): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015816.149:68257): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015816.308:68258): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015816.308:68259): pid=495389 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015816.312:68260): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015816.312:68261): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015817.326:68262): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015817.327:68263): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015817.329:68264): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495392 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015817.360:68265): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015817.361:68266): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015817.377:68267): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015817.377:68268): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015817.379:68269): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495405 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015817.426:68270): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015817.426:68271): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015817.439:68272): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015817.440:68273): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015817.441:68274): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495418 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015817.479:68275): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015817.479:68276): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015817.493:68277): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015817.494:68278): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015817.496:68279): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495432 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015817.566:68280): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015817.566:68281): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6573726464647674636675626B627A667977626E6F7877706270696A776B66203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015817.567:68282): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015817.569:68283): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015817.739:68284): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015817.740:68285): pid=495447 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015817.744:68286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015817.744:68287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015818.761:68288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015818.761:68289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015818.762:68290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495450 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015818.792:68291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015818.792:68292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015818.808:68293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015818.809:68294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015818.810:68295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495463 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015818.850:68296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015818.850:68297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015818.865:68298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015818.865:68299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015818.866:68300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495476 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015818.889:68301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015818.890:68302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015818.902:68303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015818.902:68304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015818.903:68305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495490 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015818.953:68306): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015818.953:68307): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F696E6A6A7363696561616F626E6A6E75796C6B746D68616F786D6B6B696A65203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015818.954:68308): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015818.957:68309): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015819.128:68310): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015819.128:68311): pid=495505 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015819.133:68312): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015819.134:68313): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015820.149:68314): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015820.149:68315): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015820.151:68316): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495508 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015820.181:68317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015820.182:68318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015820.197:68319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015820.198:68320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015820.199:68321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495521 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015820.246:68322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015820.247:68323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015820.260:68324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015820.260:68325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015820.262:68326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495534 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015820.294:68327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015820.294:68328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015820.308:68329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015820.308:68330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015820.310:68331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495548 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015820.370:68332): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015820.371:68333): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736378736F6170736F6C616D7764696C6B686C756D62686E7A73707A79766576203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015820.371:68334): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015820.374:68335): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015820.531:68336): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015820.531:68337): pid=495563 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015820.536:68338): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015820.536:68339): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015821.553:68340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015821.554:68341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015821.555:68342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495566 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015821.586:68343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015821.587:68344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015821.604:68345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015821.604:68346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015821.606:68347): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495579 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015821.654:68348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015821.654:68349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015821.667:68350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015821.667:68351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015821.669:68352): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495592 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015821.703:68353): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015821.703:68354): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015821.717:68355): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015821.717:68356): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015821.719:68357): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495606 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015821.787:68358): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015821.787:68359): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7573686D71657261736C766D647161796B6765616E6C766D627663676E717278203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015821.788:68360): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015821.790:68361): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015821.949:68362): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015821.949:68363): pid=495621 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015821.953:68364): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015821.953:68365): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015822.968:68366): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015822.968:68367): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015822.970:68368): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495624 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015823.004:68369): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015823.004:68370): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015823.026:68371): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015823.026:68372): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015823.028:68373): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495637 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015823.071:68374): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015823.072:68375): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015823.085:68376): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015823.085:68377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015823.086:68378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495650 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015823.112:68379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015823.113:68380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015823.128:68381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015823.128:68382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015823.129:68383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495664 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015823.186:68384): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015823.187:68385): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F6A6D7468746F6D6D6B7167767374716E6A6B7A6A786375636B647869756D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015823.187:68386): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015823.190:68387): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015823.356:68388): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015823.356:68389): pid=495679 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015823.359:68390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015823.359:68391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015824.379:68392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015824.380:68393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015824.381:68394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495682 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015824.415:68395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015824.415:68396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015824.432:68397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015824.432:68398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015824.434:68399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495695 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015824.482:68400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015824.482:68401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015824.497:68402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015824.497:68403): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015824.498:68404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495708 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015824.532:68405): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015824.532:68406): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015824.545:68407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015824.545:68408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015824.547:68409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495722 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015824.605:68410): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015824.606:68411): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6B656264787A71746A7079626D6A706567777864696A787A6E64726B6F64203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015824.606:68412): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015824.613:68413): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015824.625:68414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015824.629:68415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015824.633:68416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015824.636:68417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015824.778:68418): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015824.778:68419): pid=495737 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015824.782:68420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015824.782:68421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015824.902:68422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015824.973:68423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015825.043:68424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015825.100:68425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015825.798:68426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015825.798:68427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015825.801:68428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495856 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015825.837:68429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015825.837:68430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015825.856:68431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015825.857:68432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015825.858:68433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495869 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015825.903:68434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015825.903:68435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015825.923:68436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015825.923:68437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015825.925:68438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495882 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015825.956:68439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015825.956:68440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015825.974:68441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015825.974:68442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015825.976:68443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495896 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015826.042:68444): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015826.043:68445): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D71777162626466786F72776276766A7A6E72716A616273796A6D68716778203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015826.044:68446): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015826.049:68447): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015826.216:68448): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015826.216:68449): pid=495911 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015826.220:68450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015826.220:68451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015827.254:68452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015827.254:68453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015827.256:68454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495918 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015827.286:68455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015827.287:68456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015827.309:68457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015827.309:68458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015827.311:68459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495931 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015827.349:68460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015827.349:68461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015827.366:68462): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015827.366:68463): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015827.367:68464): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495944 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015827.393:68465): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015827.393:68466): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015827.406:68467): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015827.407:68468): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015827.408:68469): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495958 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015827.456:68470): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015827.456:68471): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A6C796D6762646A6264716C72727368636F65666964676C767A797364687A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015827.458:68472): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015827.462:68473): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015827.629:68474): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015827.629:68475): pid=495973 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015827.634:68476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015827.634:68477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015828.655:68478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015828.655:68479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015828.657:68480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495976 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015828.689:68481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015828.689:68482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015828.709:68483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015828.709:68484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015828.710:68485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=495989 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015828.761:68486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015828.761:68487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015828.775:68488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015828.775:68489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015828.777:68490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496002 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015828.812:68491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015828.813:68492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015828.832:68493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015828.832:68494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015828.834:68495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496016 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015828.892:68496): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015828.892:68497): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6767787871696870796871747A62716D7272796C6671666B656B787375796761203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015828.893:68498): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015828.914:68499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015828.918:68500): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015829.068:68501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015829.081:68502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015829.089:68503): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015829.089:68504): pid=496031 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015829.095:68505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015829.095:68506): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015829.295:68507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015830.114:68508): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015830.114:68509): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015830.115:68510): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496081 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015830.149:68511): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015830.149:68512): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015830.165:68513): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015830.165:68514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015830.167:68515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496094 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015830.212:68516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015830.212:68517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015830.226:68518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015830.226:68519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015830.227:68520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496107 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015830.261:68521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015830.261:68522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015830.277:68523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015830.277:68524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015830.278:68525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496121 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015830.343:68526): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015830.343:68527): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B736E6B756A63627467666C6572636375697565726172746679757A6F6570203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015830.344:68528): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015830.347:68529): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015830.505:68530): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015830.505:68531): pid=496136 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015830.510:68532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015830.510:68533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015831.527:68534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015831.527:68535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015831.528:68536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496139 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015831.564:68537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015831.564:68538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015831.580:68539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015831.580:68540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015831.582:68541): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496152 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015831.632:68542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015831.633:68543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015831.647:68544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015831.647:68545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015831.648:68546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496165 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015831.682:68547): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015831.682:68548): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015831.706:68549): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015831.706:68550): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015831.707:68551): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496179 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015831.772:68552): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015831.773:68553): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746874786E70776F70776B6E616D7A7574776C676B687A61666375707462627A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015831.773:68554): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015831.777:68555): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015831.941:68556): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015831.942:68557): pid=496194 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015831.946:68558): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015831.946:68559): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015832.963:68560): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015832.963:68561): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015832.965:68562): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496197 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015832.995:68563): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015832.995:68564): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015833.012:68565): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015833.012:68566): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015833.014:68567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496210 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015833.059:68568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015833.059:68569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015833.074:68570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015833.074:68571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015833.075:68572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496223 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015833.106:68573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015833.106:68574): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015833.121:68575): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015833.121:68576): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015833.123:68577): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496237 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015833.187:68578): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015833.188:68579): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6865786B727374726C797770716869716D6665687A7A6D71766376697A7A7A7A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015833.188:68580): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015833.191:68581): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015833.352:68582): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015833.352:68583): pid=496252 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015833.357:68584): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015833.357:68585): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015834.376:68586): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015834.377:68587): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015834.379:68588): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496255 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015834.409:68589): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015834.409:68590): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015834.429:68591): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015834.430:68592): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015834.431:68593): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496268 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015834.477:68594): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015834.478:68595): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015834.496:68596): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015834.497:68597): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015834.498:68598): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496281 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015834.528:68599): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015834.528:68600): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015834.553:68601): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015834.553:68602): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015834.555:68603): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496295 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015834.622:68604): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015834.622:68605): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D7A626D626B666570786C776669706D6170627672726867636A777A77777A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015834.623:68606): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015834.626:68607): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015834.805:68608): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015834.805:68609): pid=496310 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015834.809:68610): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015834.809:68611): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015835.834:68612): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015835.834:68613): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015835.836:68614): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496313 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015835.868:68615): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015835.868:68616): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015835.885:68617): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015835.886:68618): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015835.887:68619): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496326 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015835.939:68620): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015835.939:68621): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015835.956:68622): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015835.956:68623): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015835.957:68624): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496339 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015835.990:68625): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015835.990:68626): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.014:68627): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.014:68628): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.016:68629): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496353 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015836.082:68630): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015836.082:68631): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D636C7665796E616563726E78666A7261726566646B647063776D6E78796762203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015836.083:68632): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015836.086:68633): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015836.248:68634): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015836.248:68635): pid=496368 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015836.252:68636): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.252:68637): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.266:68638): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.266:68639): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.267:68640): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496371 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.292:68641): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.293:68642): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.310:68643): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.310:68644): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.311:68645): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496384 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.356:68646): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.356:68647): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.369:68648): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.369:68649): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.372:68650): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496401 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.404:68651): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.404:68652): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.418:68653): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.418:68654): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.420:68655): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496427 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015836.491:68656): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015836.491:68657): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716A616C766B70647379656D62696D66647061706562766564626276637576203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353830312E343333363932352D36313836352D39353837303336373232393732382F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015836.493:68658): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015836.497:68659): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015836.665:68660): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015836.665:68661): pid=496448 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015836.670:68662): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.670:68663): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.682:68664): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.682:68665): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.683:68666): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496461 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.715:68667): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.715:68668): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.768:68669): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.768:68670): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.770:68671): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496475 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.799:68672): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.799:68673): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.812:68674): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.812:68675): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.814:68676): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496488 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.852:68677): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.852:68678): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.871:68679): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.871:68680): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.873:68681): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496507 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.919:68682): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.919:68683): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.933:68684): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.933:68685): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.935:68686): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496520 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015836.965:68687): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015836.965:68688): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015836.979:68689): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015836.979:68690): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015836.980:68691): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496534 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015837.039:68692): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015837.039:68693): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A776C61726E6F6C7A75676D637A7A637A646D697376626374646D6E727978203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353833362E3830373636352D36323034322D3233323738393336393532303732362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015837.041:68694): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015837.044:68695): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015837.365:68696): prog-id=2520 op=LOAD
type=SYSCALL msg=audit(1765015837.365:68696): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff12dda480 a2=90 a3=9500000000 items=0 ppid=496566 pid=496567 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015837.365:68696): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306134373733336436376632306566313739666235623163386535316362
type=BPF msg=audit(1765015837.997:68697): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015838.135:68698): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015838.136:68699): pid=496549 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015838.141:68700): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.141:68701): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.153:68702): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.153:68703): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.156:68704): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496630 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.190:68705): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.191:68706): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.246:68707): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.247:68708): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.248:68709): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496644 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.286:68710): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.286:68711): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.299:68712): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.299:68713): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.301:68714): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496657 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.339:68715): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.339:68716): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.360:68717): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.360:68718): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.361:68719): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496676 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.407:68720): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.407:68721): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.425:68722): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.425:68723): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.426:68724): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496689 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.472:68725): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.472:68726): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.488:68727): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.488:68728): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.489:68729): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496702 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015838.520:68730): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.520:68731): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015838.537:68732): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015838.538:68733): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.542:68734): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496716 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015838.597:68735): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015838.598:68736): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015838.598:68737): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015838.603:68738): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015838.799:68739): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015838.799:68740): pid=496731 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015838.803:68741): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015838.803:68742): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765015839.004:68743): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015839.129:68744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015839.206:68745): prog-id=2521 op=LOAD
type=SYSCALL msg=audit(1765015839.206:68745): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe05779090 a2=90 a3=9500000000 items=0 ppid=496781 pid=496782 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015839.206:68745): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663966643662343137363832383633363232373862636463333835323038
type=SERVICE_STOP msg=audit(1765015839.471:68746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015839.639:68747): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765015839.824:68748): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015839.824:68749): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015839.826:68750): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496837 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015839.861:68751): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015839.861:68752): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015839.879:68753): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015839.879:68754): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015839.880:68755): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496850 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015839.909:68756): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015839.909:68757): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015839.923:68758): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015839.923:68759): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015839.924:68760): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496863 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015839.957:68761): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015839.958:68762): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015839.975:68763): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015839.975:68764): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015839.977:68765): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496882 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.022:68766): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.022:68767): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.037:68768): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.037:68769): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.039:68770): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496895 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.073:68771): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.073:68772): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.091:68773): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.091:68774): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.094:68775): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496909 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015840.163:68776): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015840.164:68777): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70716269616D746F706F68726F707166666C6D6B6C646864697A697161676679203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353833392E3931373933372D36323035322D38343235333535383136363137392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015840.165:68778): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015840.171:68779): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015840.346:68780): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015840.346:68781): pid=496924 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015840.351:68782): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.351:68783): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.367:68784): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.367:68785): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.369:68786): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496927 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.399:68787): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.399:68788): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.415:68789): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.415:68790): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.417:68791): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496940 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.461:68792): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.462:68793): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.474:68794): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.474:68795): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.476:68796): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496953 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.510:68797): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.510:68798): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.525:68799): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.525:68800): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.527:68801): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496967 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015840.593:68802): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015840.593:68803): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676378766772706B786A7866767A786D71757270707172756B656970667968203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353833392E3931373933372D36323035322D38343235333535383136363137392F416E736962616C6C5A5F6173796E635F7374617475732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015840.594:68804): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015840.597:68805): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015840.769:68806): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015840.770:68807): pid=496982 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015840.773:68808): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.774:68809): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.788:68810): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.788:68811): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.789:68812): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496985 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.820:68813): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.820:68814): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.886:68815): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.886:68816): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.888:68817): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=496999 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.920:68818): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.920:68819): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.932:68820): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.933:68821): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.934:68822): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497012 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015840.977:68823): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015840.977:68824): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015840.993:68825): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015840.993:68826): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.995:68827): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497031 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015841.044:68828): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015841.044:68829): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015841.057:68830): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015841.057:68831): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015841.059:68832): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497044 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015841.092:68833): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015841.093:68834): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015841.108:68835): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015841.109:68836): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015841.110:68837): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497058 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015841.181:68838): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015841.182:68839): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015841.183:68840): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015841.187:68841): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015841.562:68842): prog-id=2522 op=LOAD
type=SYSCALL msg=audit(1765015841.562:68842): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcea8ea640 a2=90 a3=9500000000 items=0 ppid=497091 pid=497092 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015841.562:68842): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376431323361353837633337396139383162303536653930666264653434
type=BPF msg=audit(1765015842.009:68843): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015842.010:68844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015842.226:68845): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015842.227:68846): pid=497073 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015842.233:68847): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.233:68848): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.248:68849): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.248:68850): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015842.249:68851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015842.250:68852): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497156 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015842.288:68853): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.288:68854): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.418:68855): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.418:68856): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.420:68857): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497170 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015842.452:68858): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.452:68859): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.464:68860): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.465:68861): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.466:68862): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497183 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015842.506:68863): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.506:68864): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.528:68865): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.528:68866): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.529:68867): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497202 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015842.579:68868): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.579:68869): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.595:68870): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.595:68871): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.596:68872): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497215 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015842.628:68873): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015842.628:68874): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015842.642:68875): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015842.642:68876): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.644:68877): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497229 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015842.710:68878): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015842.710:68879): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E7665687874747564757A776D69676D6277756F75687172766E756574797A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353834322E343630303434312D36323038382D393536303334363639323537312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015842.711:68880): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015842.715:68881): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015843.056:68882): prog-id=2523 op=LOAD
type=SYSCALL msg=audit(1765015843.056:68882): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc88adf850 a2=90 a3=9500000000 items=0 ppid=497261 pid=497262 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015843.056:68882): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636538626430343135323462353930636561623634343030383163356334
type=BPF msg=audit(1765015843.556:68883): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015843.672:68884): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015843.673:68885): pid=497244 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015843.678:68886): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015843.678:68887): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015843.701:68888): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015843.702:68889): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.704:68890): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497302 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015843.735:68891): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015843.735:68892): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015855.714:68893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015855.719:68894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015855.723:68895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015855.727:68896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015856.075:68897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015856.104:68898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015856.109:68899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015856.159:68900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015859.714:68901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015859.718:68902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015859.893:68903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015859.966:68904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015869.711:68905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015870.160:68906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015872.711:68907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015872.912:68908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015874.051:68909): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.051:68910): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.054:68911): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497533 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.088:68912): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.088:68913): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.111:68914): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.111:68915): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.112:68916): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497546 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.151:68917): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.151:68918): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.172:68919): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.172:68920): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.173:68921): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497565 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.222:68922): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.222:68923): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.238:68924): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.238:68925): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.239:68926): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497578 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.271:68927): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.272:68928): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.293:68929): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.293:68930): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.295:68931): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497592 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015874.367:68932): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015874.367:68933): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A627170707861797563737667626C7A726467637078786764766C656D6567203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353837342E3039363938392D36323130322D3138333039333033363235323937332F416E736962616C6C5A5F66696E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015874.368:68934): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015874.373:68935): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015874.537:68936): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015874.537:68937): pid=497607 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015874.541:68938): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.541:68939): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.562:68940): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.562:68941): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.564:68942): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497610 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.598:68943): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.598:68944): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.666:68945): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.666:68946): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.668:68947): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497624 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.698:68948): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.698:68949): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.713:68950): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.713:68951): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.715:68952): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497637 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.746:68953): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.746:68954): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.767:68955): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.767:68956): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.768:68957): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497656 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.812:68958): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.812:68959): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.829:68960): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.829:68961): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.830:68962): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497669 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015874.858:68963): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015874.858:68964): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015874.874:68965): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015874.874:68966): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015874.876:68967): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497683 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015874.940:68968): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015874.941:68969): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A6571776263647A6E636D7778776C6B6F6F687A646E7A656F76756172726F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353837342E3730363237372D36323131312D3237393439333438323634323330352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015874.942:68970): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015874.944:68971): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015875.126:68972): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015875.126:68973): pid=497698 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015875.131:68974): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.131:68975): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.147:68976): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.147:68977): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.149:68978): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497701 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.185:68979): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.185:68980): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.211:68981): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.211:68982): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.213:68983): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497715 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.241:68984): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.242:68985): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.258:68986): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.258:68987): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.259:68988): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497728 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.297:68989): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.297:68990): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.317:68991): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.317:68992): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.319:68993): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497747 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.365:68994): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.365:68995): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.382:68996): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.382:68997): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.384:68998): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497760 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.415:68999): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.415:69000): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.431:69001): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.431:69002): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.432:69003): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497774 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015875.499:69004): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015875.499:69005): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6679796A717971696C70627574636877746B70616D6F616C7172626B6F626468203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353837352E3235303638362D36323131312D32333332343935363037323032322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015875.500:69006): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015875.502:69007): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015875.663:69008): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015875.663:69009): pid=497789 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015875.668:69010): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.668:69011): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.682:69012): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.682:69013): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.684:69014): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497792 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.714:69015): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.715:69016): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.765:69017): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.766:69018): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.767:69019): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497806 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.798:69020): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.798:69021): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.815:69022): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.815:69023): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.817:69024): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497819 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.857:69025): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.857:69026): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.877:69027): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.877:69028): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.879:69029): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497838 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.926:69030): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.926:69031): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.942:69032): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.943:69033): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.944:69034): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497851 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015875.977:69035): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015875.977:69036): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015875.991:69037): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015875.991:69038): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015875.993:69039): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497865 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.207:69040): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.207:69041): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.221:69042): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.221:69043): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.223:69044): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497881 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.256:69045): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.256:69046): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.314:69047): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.314:69048): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.316:69049): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497895 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.349:69050): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.350:69051): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.362:69052): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.362:69053): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.364:69054): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497908 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.401:69055): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.401:69056): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.420:69057): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.420:69058): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.422:69059): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497927 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.472:69060): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.472:69061): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.490:69062): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.490:69063): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.492:69064): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497940 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015876.526:69065): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015876.526:69066): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015876.542:69067): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015876.542:69068): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015876.544:69069): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=497954 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015876.609:69070): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015876.609:69071): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71736264726E717471746C796E6A74777A756A6A726770696D707A7361756A71203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353837362E333537393435322D36323133362D32343937333133393432313731332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015876.611:69072): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015876.614:69073): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015878.825:69074): prog-id=2524 op=LOAD
type=SYSCALL msg=audit(1765015878.825:69074): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3a26ce40 a2=90 a3=9500000000 items=0 ppid=498143 pid=498144 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015878.825:69074): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373237663537343866393364376163343864393133643538633166333530
type=BPF msg=audit(1765015878.879:69075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015879.233:69076): prog-id=2525 op=LOAD
type=SYSCALL msg=audit(1765015879.233:69076): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff6daca200 a2=90 a3=9500000001 items=0 ppid=498184 pid=498185 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015879.233:69076): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616432636561616161306231326164653662373666643838613737393530
type=BPF msg=audit(1765015879.719:69077): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015879.865:69078): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015879.866:69079): pid=497969 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015879.871:69080): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015879.872:69081): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015879.885:69082): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015879.886:69083): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015879.887:69084): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498225 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015879.924:69085): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015879.924:69086): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.005:69087): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.005:69088): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.007:69089): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498239 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.043:69090): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.043:69091): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.056:69092): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.056:69093): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.057:69094): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498252 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.097:69095): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.097:69096): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.120:69097): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.120:69098): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.122:69099): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498271 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.175:69100): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.175:69101): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.197:69102): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.197:69103): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.198:69104): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498284 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.228:69105): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.228:69106): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.241:69107): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.241:69108): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.243:69109): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498298 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.443:69110): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.443:69111): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.458:69112): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.458:69113): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.460:69114): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498314 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.497:69115): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.497:69116): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.515:69117): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.515:69118): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.517:69119): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498327 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.551:69120): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.551:69121): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.568:69122): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.568:69123): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.569:69124): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498341 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.615:69125): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.615:69126): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.629:69127): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.629:69128): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.631:69129): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498354 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.669:69130): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.670:69131): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.686:69132): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.686:69133): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.687:69134): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498368 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.933:69135): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.933:69136): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015880.948:69137): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015880.948:69138): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015880.950:69139): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498384 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015880.983:69140): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015880.983:69141): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015881.034:69142): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015881.034:69143): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015881.037:69144): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498398 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015881.069:69145): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015881.069:69146): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015881.083:69147): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015881.083:69148): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015881.085:69149): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498411 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015881.123:69150): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015881.123:69151): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015881.143:69152): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015881.143:69153): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015881.145:69154): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498430 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015881.193:69155): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015881.193:69156): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015881.206:69157): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015881.207:69158): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015881.208:69159): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498443 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015881.240:69160): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015881.240:69161): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015881.257:69162): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015881.257:69163): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015881.258:69164): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498457 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015881.325:69165): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015881.325:69166): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7776716363686770716F6C6C73706D617A666C796A6B736664667678716A7265203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353838312E303737393236342D36323136332D3138383334343332343933313730322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015881.327:69167): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015881.339:69168): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015883.542:69169): prog-id=2526 op=LOAD
type=SYSCALL msg=audit(1765015883.542:69169): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2b0338d0 a2=90 a3=9500000000 items=0 ppid=498645 pid=498646 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015883.542:69169): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303439343133376462316263646130643734333963343036373264663163
type=BPF msg=audit(1765015883.593:69170): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015884.009:69171): prog-id=2527 op=LOAD
type=SYSCALL msg=audit(1765015884.009:69171): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe016142a0 a2=90 a3=9500000001 items=0 ppid=498687 pid=498688 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015884.009:69171): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636637396661616665636532646139333662623166613633643061383338
type=BPF msg=audit(1765015884.474:69172): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015884.642:69173): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015884.642:69174): pid=498472 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015884.650:69175): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015884.650:69176): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015884.666:69177): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015884.666:69178): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015884.668:69179): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498728 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015884.704:69180): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015884.705:69181): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015884.847:69182): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015884.848:69183): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015884.849:69184): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498742 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015884.885:69185): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015884.885:69186): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015884.898:69187): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015884.898:69188): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015884.899:69189): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498755 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015884.936:69190): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015884.936:69191): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015884.960:69192): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015884.960:69193): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015884.962:69194): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498774 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.004:69195): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.005:69196): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.018:69197): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.018:69198): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.019:69199): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498787 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.045:69200): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.046:69201): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.062:69202): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.062:69203): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.063:69204): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498801 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.262:69205): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.262:69206): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.278:69207): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.279:69208): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.281:69209): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498817 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.320:69210): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.320:69211): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.337:69212): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.337:69213): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.339:69214): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498830 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.372:69215): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.372:69216): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.391:69217): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.391:69218): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.393:69219): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498844 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.439:69220): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.439:69221): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.457:69222): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.457:69223): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.458:69224): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498857 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.490:69225): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.490:69226): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.505:69227): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.505:69228): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.507:69229): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498871 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.720:69230): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.720:69231): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.736:69232): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.736:69233): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.738:69234): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498887 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.772:69235): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.772:69236): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.838:69237): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.838:69238): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.840:69239): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498901 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.874:69240): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.874:69241): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.889:69242): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.889:69243): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.891:69244): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498914 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.930:69245): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.930:69246): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015885.950:69247): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015885.950:69248): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015885.952:69249): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498933 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015885.999:69250): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015885.999:69251): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015886.013:69252): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015886.013:69253): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015886.015:69254): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498946 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015886.049:69255): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015886.049:69256): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015886.063:69257): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015886.063:69258): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015886.065:69259): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=498960 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015886.135:69260): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015886.136:69261): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C6D787A6273667676686D6F656D76667774616F626E67766D707476677975203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353838352E383832343433372D36323139322D3131343731323739303732373036312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015886.136:69262): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015886.161:69263): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015886.165:69264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015886.169:69265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015886.173:69266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015886.179:69267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015886.509:69268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015886.558:69269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015886.588:69270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015886.595:69271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015888.459:69272): prog-id=2528 op=LOAD
type=SYSCALL msg=audit(1765015888.459:69272): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff736c1650 a2=90 a3=9500000000 items=0 ppid=499269 pid=499270 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015888.459:69272): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653638346238303133383163626561323238646163623366383132643739
type=BPF msg=audit(1765015888.521:69273): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015888.900:69274): prog-id=2529 op=LOAD
type=SYSCALL msg=audit(1765015888.900:69274): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdd21e41a0 a2=90 a3=9500000001 items=0 ppid=499309 pid=499310 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015888.900:69274): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326363343662333436623437396336613265656437643435663766653263
type=BPF msg=audit(1765015889.379:69275): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015889.560:69276): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015889.560:69277): pid=498975 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015889.567:69278): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.567:69279): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.578:69280): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.578:69281): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.581:69282): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499351 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015889.616:69283): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.616:69284): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.700:69285): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.700:69286): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.702:69287): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499365 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015889.733:69288): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.733:69289): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.745:69290): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.745:69291): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.746:69292): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499378 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015889.786:69293): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.786:69294): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.805:69295): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.805:69296): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.807:69297): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499397 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015889.857:69298): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.857:69299): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.871:69300): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.871:69301): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.873:69302): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499410 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015889.908:69303): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015889.908:69304): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015889.924:69305): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015889.924:69306): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015889.926:69307): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499424 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.130:69308): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.130:69309): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.147:69310): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.147:69311): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.148:69312): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499440 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.185:69313): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.185:69314): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.207:69315): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.207:69316): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.209:69317): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499453 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.247:69318): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.247:69319): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.265:69320): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.266:69321): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.268:69322): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499467 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.311:69323): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.311:69324): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.327:69325): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.327:69326): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.329:69327): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499480 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.364:69328): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.364:69329): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.381:69330): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.382:69331): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.383:69332): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499494 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.740:69333): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.740:69334): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.740:69335): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.740:69336): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.742:69337): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499510 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015890.762:69338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015890.766:69339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015890.780:69340): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.780:69341): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.822:69342): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.823:69343): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.825:69344): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499547 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.870:69345): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.871:69346): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015890.882:69347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015890.885:69348): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.885:69349): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.887:69350): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499565 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015890.920:69351): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015890.921:69352): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015890.940:69353): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015890.941:69354): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015890.942:69355): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499584 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015891.000:69356): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015891.000:69357): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015891.014:69358): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015891.014:69359): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015891.015:69360): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499612 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015891.051:69361): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015891.051:69362): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015891.068:69363): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015891.068:69364): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015891.070:69365): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499626 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015891.140:69366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015891.141:69367): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015891.142:69368): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6E777A74756266627377736E656B6F6D6369636E67656A6373667277736B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353839302E383738323737352D36323231392D3232323530303538303639383639332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015891.143:69369): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015891.149:69370): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015893.413:69371): prog-id=2530 op=LOAD
type=SYSCALL msg=audit(1765015893.413:69371): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd194cf440 a2=90 a3=9500000000 items=0 ppid=499818 pid=499819 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015893.413:69371): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323437396230653038383635336264393033346536396334393563663538
type=BPF msg=audit(1765015893.479:69372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015893.847:69373): prog-id=2531 op=LOAD
type=SYSCALL msg=audit(1765015893.847:69373): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff3a71c1d0 a2=90 a3=9500000001 items=0 ppid=499859 pid=499860 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015893.847:69373): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643731363737626562613263633335643362343036396639393035353765
type=BPF msg=audit(1765015894.300:69374): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015894.463:69375): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015894.463:69376): pid=499646 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015894.469:69377): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.470:69378): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.483:69379): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.483:69380): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.486:69381): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499898 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015894.522:69382): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.522:69383): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.694:69384): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.694:69385): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.695:69386): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499912 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015894.727:69387): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.727:69388): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.744:69389): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.745:69390): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.746:69391): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499925 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015894.785:69392): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.785:69393): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.806:69394): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.806:69395): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.807:69396): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499944 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015894.858:69397): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.858:69398): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.875:69399): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.875:69400): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.877:69401): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499957 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015894.912:69402): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015894.912:69403): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015894.934:69404): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015894.935:69405): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015894.937:69406): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499971 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.150:69407): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.150:69408): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.167:69409): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.167:69410): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.169:69411): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=499987 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.213:69412): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.213:69413): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.226:69414): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.226:69415): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.227:69416): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500000 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.262:69417): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.262:69418): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.281:69419): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.281:69420): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.283:69421): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500014 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.329:69422): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.329:69423): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.342:69424): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.342:69425): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.344:69426): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500027 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.378:69427): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.378:69428): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.393:69429): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.393:69430): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.395:69431): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500041 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.636:69432): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.636:69433): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.653:69434): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.653:69435): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.654:69436): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500057 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.691:69437): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.691:69438): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.735:69439): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.735:69440): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.736:69441): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500071 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.770:69442): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.770:69443): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.785:69444): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.785:69445): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.787:69446): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500084 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.832:69447): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.832:69448): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.853:69449): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.853:69450): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.856:69451): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500103 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.907:69452): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.907:69453): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.924:69454): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.925:69455): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.926:69456): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500116 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015895.960:69457): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015895.961:69458): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015895.977:69459): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015895.977:69460): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015895.979:69461): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500130 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015896.044:69462): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015896.044:69463): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72667164647676627A7171667179767A617278716262707A6770687962656775203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353839352E37373737362D36323235302D3133303638363938343538363534322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015896.045:69464): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015896.052:69465): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765015898.302:69466): prog-id=2532 op=LOAD
type=SYSCALL msg=audit(1765015898.302:69466): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcd7f84390 a2=90 a3=9500000000 items=0 ppid=500355 pid=500356 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015898.302:69466): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653831636235323762623431653038633438633565396231616665633666
type=BPF msg=audit(1765015898.353:69467): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015898.733:69468): prog-id=2533 op=LOAD
type=SYSCALL msg=audit(1765015898.733:69468): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcf7939390 a2=90 a3=9500000001 items=0 ppid=500396 pid=500397 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015898.733:69468): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373066366235653135663432366466333233366131373261663363386363
type=BPF msg=audit(1765015899.245:69469): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015899.402:69470): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015899.402:69471): pid=500145 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015899.409:69472): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.409:69473): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.420:69474): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.421:69475): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.422:69476): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500438 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.447:69477): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.447:69478): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.567:69479): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.567:69480): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.569:69481): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500452 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.596:69482): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.596:69483): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.609:69484): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.609:69485): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.611:69486): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500465 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.644:69487): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.644:69488): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.662:69489): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.662:69490): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.663:69491): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500484 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.706:69492): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.707:69493): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.721:69494): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.721:69495): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.722:69496): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500497 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.751:69497): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.751:69498): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.767:69499): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.767:69500): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.768:69501): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500511 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015899.968:69502): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015899.968:69503): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015899.982:69504): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015899.983:69505): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015899.984:69506): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500527 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.011:69507): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.011:69508): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.025:69509): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.026:69510): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.027:69511): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500540 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.055:69512): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.055:69513): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.072:69514): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.072:69515): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.073:69516): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500554 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.115:69517): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.115:69518): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.130:69519): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.130:69520): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.131:69521): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500567 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.161:69522): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.162:69523): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.176:69524): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.176:69525): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.178:69526): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500581 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.398:69527): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.398:69528): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.415:69529): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.415:69530): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.416:69531): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500597 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.442:69532): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.443:69533): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.674:69534): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.674:69535): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.676:69536): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500611 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.704:69537): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.704:69538): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.719:69539): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.719:69540): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015900.724:69541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015900.724:69542): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500624 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.761:69543): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.761:69544): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.780:69545): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.780:69546): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.782:69547): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500655 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.827:69548): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.827:69549): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.839:69550): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.839:69551): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.841:69552): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500674 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015900.870:69553): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015900.870:69554): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015900.883:69555): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015900.884:69556): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015900.885:69557): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500692 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015900.939:69558): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015900.940:69559): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74617273767A73746B767A726C737065716C746268707264676376676D677072203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353930302E373131363136352D36323238392D31353535393335373639303030302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015900.940:69560): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015900.943:69561): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765015901.042:69562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015901.277:69563): prog-id=2534 op=LOAD
type=SYSCALL msg=audit(1765015901.277:69563): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbf817af0 a2=90 a3=9500000000 items=0 ppid=500731 pid=500732 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015901.277:69563): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376632316431623438373861353565383831383239346235376238636339
type=BPF msg=audit(1765015901.796:69564): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015901.923:69565): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015901.924:69566): pid=500707 uid=1003 auid=1003 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015901.928:69567): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015901.928:69568): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015901.942:69569): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015901.942:69570): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015901.944:69571): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=500770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015901.976:69572): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015901.976:69573): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765015903.720:69574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015903.914:69575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015916.716:69576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015916.719:69577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015916.722:69578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015916.726:69579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015917.043:69580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015917.087:69581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015917.105:69582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015917.131:69583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015921.717:69584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015921.721:69585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015921.861:69586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015922.081:69587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015931.712:69588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015932.092:69589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015934.711:69590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015934.863:69591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015947.712:69592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015947.716:69593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015947.720:69594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015947.725:69595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015948.036:69596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015948.062:69597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015948.088:69598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015948.118:69599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015952.720:69600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015952.723:69601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015952.926:69602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015952.970:69603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015961.415:69604): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467471 suid=1003 rport=46422 laddr=192.168.122.103 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015961.416:69605): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467471 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015961.420:69606): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015961.420:69607): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015961.421:69608): pid=467451 uid=0 auid=1003 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=467451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=SERVICE_START msg=audit(1765015962.707:69609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015963.097:69610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015965.711:69611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015965.899:69612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015971.463:69613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015971.502:69614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015978.714:69615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015978.718:69616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015978.722:69617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015978.727:69618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015979.022:69619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015979.054:69620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015979.078:69621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015979.194:69622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015983.709:69623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015983.712:69624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015983.909:69625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015984.049:69626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015993.716:69627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015994.096:69628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015996.713:69629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015996.930:69630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016009.717:69631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016009.721:69632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016009.725:69633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016009.730:69634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016009.999:69635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016010.111:69636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016010.145:69637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016010.198:69638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016014.712:69639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016014.718:69640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016014.942:69641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016014.993:69642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016024.711:69643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016025.024:69644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016027.710:69645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016027.887:69646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016036.773:69647): pid=501779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=501779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765016037.034:69648): pid=501780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=501780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016040.713:69649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016040.716:69650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016040.720:69651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016040.725:69652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016041.023:69653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016041.109:69654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016041.168:69655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016041.222:69656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016045.709:69657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016045.713:69658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016045.941:69659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016045.968:69660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016055.712:69661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016056.116:69662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016058.711:69663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016058.841:69664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016070.158:69665): pid=502009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765016070.268:69666): pid=502010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016071.715:69667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016071.720:69668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016071.722:69669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016071.725:69670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016072.010:69671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016072.083:69672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016072.103:69673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016072.154:69674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016072.437:69675): pid=502127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016076.712:69676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016076.717:69677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016076.907:69678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016076.957:69679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016086.712:69680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016087.088:69681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016089.709:69682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016089.874:69683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016102.711:69684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016102.714:69685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016102.717:69686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016102.719:69687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016103.053:69688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016103.067:69689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016103.102:69690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016103.107:69691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016107.711:69692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016107.715:69693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016107.838:69694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016107.991:69695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016117.137:69696): pid=502436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016117.163:69697): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=502436 suid=74 rport=55346 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016117.163:69698): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=502436 suid=74 rport=55346 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016117.732:69699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016118.090:69700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016120.712:69701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016120.948:69702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016127.114:69703): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=502436 suid=74 rport=55346 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016127.114:69704): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502436 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016127.114:69705): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=502435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016127.114:69706): pid=502435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016133.713:69707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016133.717:69708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016133.722:69709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016133.726:69710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016134.034:69711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016134.057:69712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016134.088:69713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016134.161:69714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016138.707:69715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016138.710:69716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016138.892:69717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016138.970:69718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016148.711:69719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016149.066:69720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016151.716:69721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016151.890:69722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016164.717:69723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016164.721:69724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016164.724:69725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016164.728:69726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016165.029:69727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016165.076:69728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016165.132:69729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016165.206:69730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016169.708:69731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016169.712:69732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016169.909:69733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016170.025:69734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016179.712:69735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016180.058:69736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016182.711:69737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016182.917:69738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016195.719:69739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016195.723:69740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016195.727:69741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016195.731:69742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016196.023:69743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016196.145:69744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016196.181:69745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016196.208:69746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016200.713:69747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016200.718:69748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016200.885:69749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016200.954:69750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016210.713:69751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016211.118:69752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016213.708:69753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016213.899:69754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016218.803:69755): pid=503231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016219.271:69756): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503231 suid=74 rport=59378 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016219.272:69757): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503231 suid=74 rport=59378 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016220.683:69758): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503231 suid=74 rport=59378 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016220.684:69759): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503231 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016220.685:69760): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016220.685:69761): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016220.686:69762): pid=503230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016221.220:69763): pid=503233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016221.221:69764): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503233 suid=74 rport=59392 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016221.221:69765): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503233 suid=74 rport=59392 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016223.150:69766): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503233 suid=74 rport=59392 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016223.150:69767): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503233 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016223.151:69768): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016223.152:69769): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016223.152:69770): pid=503232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016223.431:69771): pid=503235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016223.432:69772): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503235 suid=74 rport=59406 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016223.432:69773): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503235 suid=74 rport=59406 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016224.671:69774): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503235 suid=74 rport=59406 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016224.672:69775): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503235 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016224.673:69776): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016224.673:69777): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016224.674:69778): pid=503234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016224.999:69779): pid=503237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016225.000:69780): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503237 suid=74 rport=53892 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016225.000:69781): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503237 suid=74 rport=53892 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016226.717:69782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016226.718:69783): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503237 suid=74 rport=53892 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016226.720:69784): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503237 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016226.720:69785): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016226.721:69786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016226.722:69787): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016226.722:69788): pid=503236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016226.725:69789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016226.729:69790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016227.070:69791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016227.106:69792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016227.115:69793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016227.138:69794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016227.222:69795): pid=503357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016227.224:69796): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503357 suid=74 rport=53918 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016227.224:69797): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=503357 suid=74 rport=53918 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016228.950:69798): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=503357 suid=74 rport=53918 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016228.951:69799): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503357 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016228.951:69800): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016228.952:69801): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=503304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016228.952:69802): pid=503304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016231.712:69803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016231.717:69804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016231.919:69805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016231.959:69806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016241.709:69807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016242.053:69808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016244.708:69809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016244.866:69810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016257.711:69811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016257.714:69812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016257.717:69813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016257.722:69814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.030:69815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.061:69816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.091:69817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.116:69818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016262.717:69819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016262.722:69820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016262.920:69821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016262.949:69822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016272.711:69823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016273.062:69824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016275.710:69825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016275.886:69826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016288.713:69827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016288.716:69828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016288.719:69829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016288.722:69830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016288.994:69831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016289.028:69832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016289.085:69833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016289.099:69834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016289.251:69835): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016289.251:69836): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D706D745F74763171792F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016289.252:69837): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016289.254:69838): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016289.884:69839): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016289.885:69840): pid=503848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016293.713:69841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016293.717:69842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016293.853:69843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016294.053:69844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016303.710:69845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016304.096:69846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016306.706:69847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016306.873:69848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.710:69849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.714:69850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.717:69851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.720:69852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016319.872:69853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016319.959:69854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016320.061:69855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016320.137:69856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016324.713:69857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016324.717:69858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016324.883:69859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016324.966:69860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016334.708:69861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016335.100:69862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016337.718:69863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016337.867:69864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.713:69865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.716:69866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.720:69867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.724:69868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016351.008:69869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016351.027:69870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016351.074:69871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016351.115:69872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016355.708:69873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016355.712:69874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016355.912:69875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016355.952:69876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016365.711:69877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016366.056:69878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016368.712:69879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016368.884:69880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.713:69881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.716:69882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.719:69883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.722:69884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016382.054:69885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016382.083:69886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016382.108:69887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016382.140:69888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016386.713:69889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016386.716:69890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016386.904:69891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016386.994:69892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016396.707:69893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016396.997:69894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016399.719:69895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016399.908:69896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.712:69897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.715:69898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.718:69899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.722:69900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016412.963:69901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016413.125:69902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016413.156:69903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016413.189:69904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016417.713:69905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016417.717:69906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016417.883:69907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016417.909:69908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016427.712:69909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016428.024:69910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016430.710:69911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016431.040:69912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016443.715:69913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016443.719:69914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016443.723:69915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016443.727:69916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016444.023:69917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016444.041:69918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016444.074:69919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016444.233:69920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016448.710:69921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016448.714:69922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016448.856:69923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016449.044:69924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016458.715:69925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016459.099:69926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016461.710:69927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016461.934:69928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016474.710:69929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016474.713:69930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016474.716:69931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016474.718:69932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016474.973:69933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016475.069:69934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016475.144:69935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016475.304:69936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016479.710:69937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016479.713:69938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016479.920:69939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016479.972:69940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016489.716:69941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016490.168:69942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016492.715:69943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016492.871:69944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016505.713:69945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016505.716:69946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016505.719:69947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016505.723:69948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016506.001:69949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016506.041:69950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016506.096:69951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016506.269:69952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016510.711:69953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016510.715:69954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016510.909:69955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016510.972:69956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016520.712:69957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016521.036:69958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016523.711:69959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016523.868:69960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016536.714:69961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016536.718:69962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016536.722:69963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016536.726:69964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016537.046:69965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016537.099:69966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016537.104:69967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016537.213:69968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016541.712:69969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016541.715:69970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016541.915:69971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016541.978:69972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016551.711:69973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016552.065:69974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016554.720:69975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016554.878:69976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016567.724:69977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016567.728:69978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016567.731:69979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016567.735:69980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016567.971:69981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016568.019:69982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016568.223:69983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016568.251:69984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016572.717:69985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016572.722:69986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016572.964:69987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016573.037:69988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016582.710:69989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016583.104:69990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016585.712:69991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016585.928:69992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016598.714:69993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016598.717:69994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016598.721:69995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016598.724:69996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016599.032:69997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016599.061:69998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016599.098:69999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016599.178:70000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016603.712:70001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016603.715:70002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016603.879:70003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016603.994:70004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016613.712:70005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016614.080:70006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016616.714:70007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016616.890:70008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016629.710:70009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016629.713:70010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016629.716:70011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016629.720:70012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016630.026:70013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016630.062:70014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016630.094:70015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016630.128:70016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016634.707:70017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016634.710:70018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016634.916:70019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016634.973:70020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016644.712:70021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016645.055:70022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016647.712:70023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016647.893:70024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016660.711:70025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016660.715:70026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016660.719:70027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016660.723:70028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016661.054:70029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016661.078:70030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016661.105:70031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016661.156:70032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016665.709:70033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016665.712:70034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016665.826:70035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016666.101:70036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016675.710:70037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016676.085:70038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016678.716:70039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016678.894:70040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016691.724:70041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016691.727:70042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016691.731:70043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016691.734:70044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016692.001:70045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016692.068:70046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016692.094:70047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016692.209:70048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016696.709:70049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016696.713:70050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016696.882:70051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016696.963:70052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016706.712:70053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016707.117:70054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016709.709:70055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016709.861:70056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016722.715:70057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016722.719:70058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016722.722:70059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016722.726:70060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016723.032:70061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016723.071:70062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016723.216:70063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016723.288:70064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016727.713:70065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016727.717:70066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016727.896:70067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016727.963:70068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016737.712:70069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016738.002:70070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016740.711:70071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016740.921:70072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016753.722:70073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016753.725:70074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016753.729:70075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016753.732:70076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016754.045:70077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016754.105:70078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016754.152:70079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016754.201:70080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016758.711:70081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016758.715:70082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016758.941:70083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016758.952:70084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016768.708:70085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016769.082:70086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016771.711:70087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016771.871:70088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016784.713:70089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016784.716:70090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016784.719:70091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016784.724:70092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016785.024:70093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016785.069:70094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016785.126:70095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016785.185:70096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016789.713:70097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016789.717:70098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016789.917:70099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016789.949:70100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016796.555:70101): pid=507762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016796.663:70102): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=507762 suid=74 rport=59398 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016796.663:70103): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=507762 suid=74 rport=59398 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016797.301:70104): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507762 suid=74 rport=59398 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016797.302:70105): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507762 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016797.302:70106): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.33 addr=193.46.255.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016797.303:70107): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016797.303:70108): pid=507761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016799.473:70109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016799.797:70110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016802.714:70111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016802.944:70112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016807.249:70113): pid=507848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016807.250:70114): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507848 suid=74 rport=41106 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016807.250:70115): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507848 suid=74 rport=41106 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016808.975:70116): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507848 suid=74 rport=41106 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016808.975:70117): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507848 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016808.976:70118): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016808.976:70119): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016808.977:70120): pid=507847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016809.491:70121): pid=507850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016809.492:70122): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507850 suid=74 rport=41116 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016809.493:70123): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507850 suid=74 rport=41116 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016811.574:70124): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507850 suid=74 rport=41116 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016811.574:70125): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507850 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016811.575:70126): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016811.575:70127): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016811.576:70128): pid=507849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016811.927:70129): pid=507852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016811.928:70130): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507852 suid=74 rport=41138 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016811.928:70131): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507852 suid=74 rport=41138 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016813.463:70132): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507852 suid=74 rport=41138 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016813.463:70133): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507852 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016813.464:70134): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016813.465:70135): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016813.465:70136): pid=507851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016813.987:70137): pid=507854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016813.989:70138): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507854 suid=74 rport=21724 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016813.989:70139): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507854 suid=74 rport=21724 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016815.707:70140): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507854 suid=74 rport=21724 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016815.707:70141): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507854 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016815.708:70142): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016815.708:70143): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016815.708:70144): pid=507853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016815.712:70145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016815.716:70146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016815.720:70147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016815.724:70148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016816.010:70149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016816.044:70150): pid=507964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016816.044:70151): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507964 suid=74 rport=21728 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016816.044:70152): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=507964 suid=74 rport=21728 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765016816.044:70153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016816.068:70154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016816.184:70155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016817.536:70156): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507964 suid=74 rport=21728 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016817.536:70157): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507964 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016817.537:70158): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016817.537:70159): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=507897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016817.537:70160): pid=507897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016820.713:70161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016820.717:70162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016820.841:70163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016821.069:70164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016830.707:70165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016831.049:70166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016833.710:70167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016833.939:70168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016846.717:70169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016846.721:70170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016846.725:70171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016846.728:70172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016847.072:70173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016847.131:70174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016847.168:70175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016847.228:70176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016851.713:70177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016851.716:70178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016851.906:70179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016851.989:70180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016861.708:70181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016862.087:70182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016864.712:70183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016864.899:70184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016877.714:70185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016877.719:70186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016877.722:70187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016877.725:70188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016877.951:70189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016878.034:70190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016878.077:70191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016878.239:70192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016882.713:70193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016882.716:70194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016882.848:70195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016882.909:70196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016887.539:70197): pid=508526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016887.540:70198): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508526 suid=74 rport=38996 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016887.541:70199): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508526 suid=74 rport=38996 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016889.524:70200): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508526 suid=74 rport=38996 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016889.524:70201): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508526 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016889.525:70202): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016889.525:70203): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016889.525:70204): pid=508525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016890.050:70205): pid=508528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016890.051:70206): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508528 suid=74 rport=39010 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016890.051:70207): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508528 suid=74 rport=39010 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016891.889:70208): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508528 suid=74 rport=39010 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016891.889:70209): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508528 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016891.890:70210): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016891.890:70211): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016891.891:70212): pid=508527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016892.381:70213): pid=508530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016892.382:70214): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508530 suid=74 rport=55262 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016892.382:70215): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508530 suid=74 rport=55262 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016892.708:70216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016893.064:70217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016895.208:70218): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508530 suid=74 rport=55262 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016895.208:70219): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508530 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016895.209:70220): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016895.210:70221): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016895.210:70222): pid=508529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016895.223:70223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016895.414:70224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016895.843:70225): pid=508587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016895.844:70226): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508587 suid=74 rport=55266 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016895.844:70227): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508587 suid=74 rport=55266 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016897.905:70228): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508587 suid=74 rport=55266 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016897.905:70229): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508587 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016897.906:70230): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016897.907:70231): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016897.907:70232): pid=508586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016898.394:70233): pid=508589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016898.395:70234): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508589 suid=74 rport=55276 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016898.395:70235): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=508589 suid=74 rport=55276 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016900.253:70236): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508589 suid=74 rport=55276 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016900.253:70237): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508589 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016900.254:70238): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016900.255:70239): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=508588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016900.255:70240): pid=508588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016908.715:70241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016908.719:70242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016908.723:70243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016908.726:70244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016908.921:70245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016909.024:70246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016909.169:70247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016909.216:70248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016913.713:70249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016913.717:70250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016913.838:70251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016913.996:70252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016923.710:70253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016924.058:70254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016925.710:70255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016925.917:70256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016939.717:70257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016939.721:70258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016939.725:70259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016939.728:70260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016939.971:70261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016940.039:70262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016940.068:70263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016940.092:70264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016944.712:70265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016944.716:70266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016944.830:70267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016945.013:70268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016954.713:70269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016955.062:70270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016956.711:70271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016956.912:70272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016970.712:70273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016970.717:70274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016970.726:70275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016970.729:70276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016970.958:70277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016971.021:70278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016971.059:70279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016971.154:70280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016975.713:70281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016975.716:70282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016975.907:70283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016975.931:70284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016985.713:70285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016986.045:70286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016987.715:70287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016987.858:70288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017001.714:70289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017001.717:70290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017001.720:70291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017001.724:70292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017001.979:70293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017002.049:70294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017002.103:70295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017002.206:70296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017006.717:70297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017006.721:70298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017006.901:70299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017006.948:70300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017016.709:70301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017017.082:70302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017018.711:70303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017018.904:70304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017032.714:70305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017032.718:70306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017032.722:70307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017032.725:70308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017033.065:70309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017033.071:70310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017033.082:70311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017033.140:70312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017037.715:70313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017037.719:70314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017037.920:70315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017037.947:70316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017047.712:70317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017048.092:70318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017049.710:70319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017049.903:70320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017063.711:70321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017063.715:70322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017063.719:70323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017063.722:70324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017063.993:70325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017064.045:70326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017064.077:70327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017064.110:70328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017068.707:70329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017068.710:70330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017068.852:70331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017068.967:70332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017078.717:70333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017079.049:70334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017080.714:70335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017080.894:70336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.409:70337): pid=510022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017093.411:70338): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=510022 suid=74 rport=38512 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017093.411:70339): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=510022 suid=74 rport=38512 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017093.477:70340): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017093.490:70341): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.491:70342): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017093.523:70343): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.524:70344): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510022 suid=74 rport=38512 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017093.526:70345): pid=510021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017093.526:70346): pid=510021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=253 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017093.526:70346): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff1fdc9b40 a2=4 a3=3e8 items=0 ppid=409081 pid=510021 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=253 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017093.526:70346): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017093.527:70347): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1765017093.574:70348): pid=510024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765017093.574:70349): pid=510024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765017093.575:70350): pid=510024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017093.575:70351): pid=510024 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=254 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017093.575:70351): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe34f5ff60 a2=4 a3=3e8 items=0 ppid=1 pid=510024 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=254 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017093.575:70351): proctitle="(systemd)"
type=USER_START msg=audit(1765017093.577:70352): pid=510024 uid=0 auid=1000 ses=254 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765017093.738:70353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765017093.756:70354): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017093.757:70355): pid=510039 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017093.759:70356): pid=510039 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017093.804:70357): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017093.804:70358): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017093.806:70359): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765017093.854:70360): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017093.855:70361): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7563756B6C6779736D6A6764766A79797764636F647579676B6A7875756E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017093.855:70362): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017093.860:70363): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017094.280:70364): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765017094.281:70365): pid=510053 uid=1000 auid=1000 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017094.284:70366): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765017094.284:70367): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765017094.711:70368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017094.715:70369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017094.719:70370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017094.723:70371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017094.986:70372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bbfcf7133e832a0c902b5bc29b703c573aceff0270f06b7e9ef9161a7429ae45 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017095.072:70373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5561b9635e910099d59d633ca230b27edc5c68df1acf8d756e5de7c050a3bd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017095.115:70374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=19d6fe5fb48a4f8cc57bcdc40186cf7ee092210ff053bf94d1397f091cad0e1c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017095.143:70375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdbac3005a5b36d8da22a7d98fc489cd4002d0ef360074f70891e53e4279fd66 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017099.594:70376): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510039 suid=1000 rport=38512 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.595:70377): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765017099.598:70378): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765017099.598:70379): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.598:70380): pid=510021 uid=0 auid=1000 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765017099.617:70381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017099.619:70382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017099.816:70383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=40ead51a8866f196bd8926124ed23560c9709317a0d7d87c9093be008b4743a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017099.871:70384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1f8684d383fdc75d59e3817233dac16212be59f724c629729916e9955c6a5255 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017109.714:70385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017109.726:70386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017110.090:70387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c11f2b35c9a34ff2701f2c43550e4c680ce265f68dbbd0b0051d2c051beabbce comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017111.712:70388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017111.862:70389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=db3c18f13fc4718c88a162004a08e6a9086233fb216e0db630ae23daaff140f4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.411:70390): pid=510311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017112.413:70391): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=510311 suid=74 rport=54360 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017112.413:70392): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=510311 suid=74 rport=54360 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017112.477:70393): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017112.492:70394): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.492:70395): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017112.522:70396): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.522:70397): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=510311 suid=74 rport=54360 laddr=38.102.83.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017112.524:70398): pid=510310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017112.525:70399): pid=510310 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=255 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017112.525:70399): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe496ecbd0 a2=4 a3=3e8 items=0 ppid=409081 pid=510310 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=255 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017112.525:70399): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017112.526:70400): pid=510310 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1765017112.586:70401): pid=510313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765017112.587:70402): pid=510313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765017112.588:70403): pid=510313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017112.588:70404): pid=510313 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=256 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017112.588:70404): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe34f5ff60 a2=4 a3=3e8 items=0 ppid=1 pid=510313 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=256 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017112.588:70404): proctitle="(systemd)"
type=USER_START msg=audit(1765017112.591:70405): pid=510313 uid=0 auid=1000 ses=256 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765017112.764:70406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765017112.783:70407): pid=510310 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017112.784:70408): pid=510328 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017112.785:70409): pid=510328 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017112.828:70410): pid=510310 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017112.828:70411): pid=510310 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017112.830:70412): pid=510310 uid=0 auid=1000 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c4:c5:1a:d5:c8:fc:72:ea:1f:07:e4:02:91:98:ed:c5:bc:9e:ff:a3:0c:10:09:06:aa:11:9a:5b:83:0a:c1:c2 direction=? spid=510329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765017112.881:70413): pid=510329 uid=1000 auid=1000 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017112.881:70414): pid=510329 uid=1000 auid=1000 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017112.882:70415): pid=510329 uid=1000 auid=1000 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017112.886:70416): pid=510329 uid=1000 auid=1000 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"